Malicious Code Detected in Gameliner Package (npm)
Summary
MAL-2025-21171: Malicious code in gameliner (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Gameliner is an npm package designed for game development, providing various utilities and tools to streamline the process. It is widely used in the JavaScript community for building interactive and engaging gaming experiences. However, recent findings have revealed that the package contains malicious code, posing a significant risk to developers and users who rely on it.
Vulnerability Detail
The vulnerability stems from the inclusion of malicious code within the gameliner package, which was introduced in version 0. This malicious code can potentially compromise the security of applications that utilize the package, leading to unauthorized access, data breaches, or other harmful consequences. Users of the package are at risk of exploitation if they do not take immediate action to mitigate this threat.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall gamelinerIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, consider removing the gameliner package from your project until a secure version is released. You can uninstall it using the command: npm uninstall gameliner.
Conclusion
The discovery of malicious code in the gameliner package poses a serious threat to developers and users. It is essential to take immediate action by updating or removing the package to safeguard your applications. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for gameliner →
FAQ
The malicious code can compromise application security, potentially leading to unauthorized access and data breaches.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without any signup.
If an immediate update is not possible, consider removing the package from your project as a temporary measure.
While specific exploits have not been detailed, the presence of malicious code indicates a high risk of exploitation.
Regularly check vulnerability databases and consider using tools like Vulert to receive real-time alerts about vulnerabilities in your dependencies.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
