Malicious Code in print-vault-browser (npm)
Summary
MAL-2023-8462: Malicious code in print-vault-browser (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
print-vault-browser is an npm package that provides functionality for printing and managing documents securely. It is commonly used in applications that require secure document handling and printing capabilities. However, the package has been found to contain malicious code, which poses a significant security risk to any computer that has it installed or running.
Vulnerability Detail
The malicious code in print-vault-browser has been identified as a serious threat. It is advised to consider any computer with this package installed as fully compromised. The code may have given outside entities full control of the computer, potentially exposing all secrets and keys stored on it. Immediate action is required to rotate all affected secrets and keys from a different computer. Although removing the package is recommended, it cannot guarantee the removal of all malicious software resulting from its installation.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall print-vault-browserIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The presence of malicious code in the print-vault-browser npm package poses a significant security risk. It is crucial to take immediate action to rotate affected secrets and keys, remove the package, and conduct a thorough security audit. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for print-vault-browser →
FAQ
print-vault-browser is an npm package that provides functionality for printing and managing documents securely.
The malicious code in print-vault-browser compromises the security of any computer that has it installed or running. It may give outside entities full control of the computer and expose all stored secrets and keys.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring access to the code or installation.
If your computer is affected, you should immediately rotate all secrets and keys stored on it from a different, secure computer. Remove the print-vault-browser package and conduct a thorough security audit.
No, there is no guarantee that removing the print-vault-browser package will remove all malicious software resulting from its installation. A thorough security audit is recommended to identify any other potential compromises or vulnerabilities.
