Critical Malicious Code Vulnerability in preview-server-auth-test Package
Summary
MAL-2025-5821: Malicious code in preview-server-auth-test (npm). Affects preview-server-auth-test versions >= 1.1.5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The preview-server-auth-test package is an npm module designed for testing server authentication functionalities. It allows developers to simulate and validate authentication processes in their applications. However, this package has been identified to communicate with a domain associated with malicious activities, posing significant security risks to applications that utilize it.
Vulnerability Detail
The vulnerability arises from the package's communication with a domain linked to malicious activities, which can lead to data breaches, unauthorized access, and potential exploitation of the application. This issue was introduced in version 1.1.5 and could compromise the integrity and confidentiality of user data.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall preview-server-auth-testIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, you can remove the preview-server-auth-test package from your project until a secure version is released. This can be done by executing the following command: npm uninstall preview-server-auth-test.
Conclusion
The preview-server-auth-test package has a critical vulnerability that allows communication with a malicious domain, posing significant risks to applications. It is crucial to update or remove the package to safeguard your application from potential threats. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for preview-server-auth-test →
FAQ
The vulnerability involves the package communicating with a domain associated with malicious activities, which can compromise application security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, consider removing the package from your project as a temporary workaround to mitigate risks.
Yes, Vulert provides real-time monitoring for open-source vulnerabilities using just your package-lock.json file, ensuring you stay informed about potential threats.
Failing to address this vulnerability could lead to data breaches, unauthorized access to sensitive information, and exploitation of your application by malicious actors.
