Critical Malicious Code Vulnerability in gifhorse-cli Package
Summary
MAL-2025-21410: Malicious code in gifhorse-cli (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The gifhorse-cli package is a command-line interface tool designed for generating GIFs from images. It is widely used in various projects for its simplicity and efficiency. However, recent findings have revealed that this package contains malicious code, posing significant security risks to users and their applications.
Vulnerability Detail
The vulnerability in the gifhorse-cli package stems from the inclusion of malicious code that can compromise user systems. This code may allow unauthorized access, data exfiltration, or other harmful actions. The issue was introduced in version 0 and affects all subsequent versions. Users of this package are at risk of severe consequences, including data loss and system integrity breaches.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall gifhorse-cliIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, consider removing the gifhorse-cli package from your project until a secure version is released. You can do this by running: npm uninstall gifhorse-cli.
Conclusion
The discovery of malicious code in the gifhorse-cli package highlights the importance of maintaining secure dependencies in software projects. Users are urged to update or remove the package to protect their systems from potential threats. Regular monitoring for vulnerabilities is essential for maintaining application security.
See every vulnerability recorded for gifhorse-cli →
FAQ
gifhorse-cli is a command-line tool used for generating GIFs from images, popular for its ease of use.
The malicious code can potentially allow unauthorized access to user systems, leading to data breaches and other security issues.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
If an immediate update is not possible, consider uninstalling the package as a temporary workaround to mitigate risks.
Utilize tools like Vulert, which monitors your package-lock.json file to alert you in real-time about open-source vulnerabilities.
