Malicious Code in linktr.ee (npm)
Summary
MAL-2023-8544: Malicious code in linktr.ee (npm). Affects linktr.ee versions 9.9.9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linktr.ee is an npm package that provides a service for creating a personal landing page with links to various social media profiles and websites. It is commonly used by individuals and businesses to consolidate their online presence. However, the package has been found to contain malicious code, which poses a significant security risk to any computer that has it installed or running.
Vulnerability Detail
The malicious code in linktr.ee has been identified as a severe security threat. It is advised to consider any computer with this package installed as fully compromised. The code may grant outside entities full control over the affected computer, potentially leading to unauthorized access to sensitive information and credentials. As a precautionary measure, all secrets and keys stored on the compromised computer should be rotated immediately from a different computer. Although removing the package is recommended, it cannot guarantee the removal of all malicious software resulting from its installation.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall linktr.eeIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is crucial to follow the steps outlined in the 'how_to_fix' section to mitigate the risk effectively.
Conclusion
The presence of malicious code in the linktr.ee npm package poses a significant security risk. It is crucial to take immediate action by rotating secrets and keys, removing the package, and conducting a thorough security scan. Regularly updating and patching software is essential to prevent future vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linktr.ee →
FAQ
linktr.ee is an npm package that allows users to create a personal landing page with links to their social media profiles and websites.
The malicious code in linktr.ee can compromise your computer, giving outside entities full control. This can result in unauthorized access to sensitive information and credentials.
If you have linktr.ee installed, it is recommended to rotate all secrets and keys stored on your computer from a different, secure computer. Remove the linktr.ee package and perform a thorough security scan.
While removing the linktr.ee package is advised, it cannot guarantee the complete removal of all malicious software resulting from its installation. A thorough security scan is necessary to ensure all traces are eliminated.
To prevent future vulnerabilities, regularly update and patch all software and packages. Stay informed about security advisories and follow best practices for secure coding and package management.
