Critical Malicious Code Vulnerability in gfxapi Package
Summary
MAL-2025-21396: Malicious code in gfxapi (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The gfxapi package is an npm library designed for graphics API interactions, providing developers with tools to manage and manipulate graphic elements in applications. However, it has been identified to contain malicious code that poses significant security risks to users and their applications.
Vulnerability Detail
The gfxapi package was found to contain malicious code, which can lead to unauthorized access, data breaches, or compromise of user systems. This vulnerability originated from the package itself, which was introduced in version 0 and has not been addressed in subsequent releases. The presence of such malicious code can severely impact the integrity and security of applications utilizing this package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall gfxapiIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, consider replacing gfxapi with an alternative package that provides similar functionality without the associated risks. Always ensure that any new package is thoroughly vetted for security.
Conclusion
The gfxapi package has been identified as containing malicious code, posing serious security risks to applications that utilize it. Users are advised to uninstall the package and seek alternatives to ensure the safety and integrity of their software.
See every vulnerability recorded for gfxapi →
FAQ
gfxapi is an npm package designed for graphics API interactions, allowing developers to manage graphic elements in their applications.
The gfxapi package contains malicious code that can compromise the security of applications using it.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without any signup.
It is recommended to uninstall the gfxapi package immediately and look for alternative packages that offer similar functionality.
Currently, there is no patched version available for gfxapi. Users should uninstall the package to mitigate risks.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
