Malicious Code Vulnerability in mod-trans: A Threat to npm Packages
Summary
MAL-2025-6633: Malicious code in mod-trans (npm). Affects mod-trans versions 1.0.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mod-trans package is a JavaScript library available on npm, designed to facilitate modular translations in applications. It allows developers to manage and implement translations efficiently. However, the package has been identified with a significant vulnerability that exposes users to potential malicious code execution, compromising application security.
Vulnerability Detail
The vulnerability identified as MAL-2025-6633 originates from a malicious code injection in version 1.0.8 of the mod-trans package. This malicious code can lead to unauthorized access to sensitive data, potential data breaches, and exploitation of the affected systems. The code was discovered by ReversingLabs, highlighting the importance of scrutinizing third-party packages for security risks.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall mod-transIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If immediate updating is not feasible, consider removing the mod-trans package from your project until a secure version is released. You can do this by running: 'npm uninstall mod-trans'. Additionally, monitor your application using tools like Vulert, which can alert you to vulnerabilities in real-time.
Conclusion
The mod-trans package has been identified with a serious vulnerability that poses risks to application security. It is essential for developers to update to a secure version promptly and utilize tools like Vulert to monitor for vulnerabilities in their projects.
See every vulnerability recorded for mod-trans →
FAQ
mod-trans is an npm package used for managing translations in JavaScript applications, allowing developers to implement modular translation systems.
MAL-2025-6633 refers to a malicious code injection found in version 1.0.8 of the mod-trans package, which can lead to unauthorized access and data breaches.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If you cannot update the package right away, consider uninstalling it and monitoring your application for vulnerabilities using tools like Vulert.
The vulnerability was discovered by ReversingLabs, a cybersecurity firm specializing in threat detection and analysis.
