Malicious code in sendapp (npm)
Summary
MAL-2024-7820: Malicious code in sendapp (npm). Affects sendapp versions 1.4.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'sendapp' package is an npm package that is used for communication purposes. It allows users to send messages and data to a specified domain. The package is commonly used in various applications that require sending information to external sources. However, the package has been identified as malicious due to its communication with a domain associated with malicious activity.
Vulnerability Detail
The 'sendapp' package at version 1.4.0 has been flagged as malicious by the OpenSSF Package Analysis project. The package communicates with a domain that is known for its involvement in malicious activities. This poses a significant security risk as it can potentially expose sensitive information or allow unauthorized access to the system. Users who have installed this version of the package are advised to take immediate action to mitigate the vulnerability.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall sendappIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to remove the 'sendapp' package and follow the recommended steps to fix the issue.
Conclusion
The 'sendapp' package at version 1.4.0 has been identified as malicious due to its communication with a domain associated with malicious activity. Users are advised to remove the package from their applications and update their dependencies to prevent any potential security risks. It is also recommended to scan the system for any signs of compromise and take appropriate measures to secure the environment.
See every vulnerability recorded for sendapp →
FAQ
This vulnerability can lead to unauthorized access to the system and potential exposure of sensitive information. It can also facilitate the execution of malicious code on the affected system.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
No, the entire 'sendapp' package is considered malicious. It is recommended to remove it entirely from your application.
No, the best course of action is to remove the 'sendapp' package completely. Continuing to use it may expose your system to security risks.
While specific exploits targeting this vulnerability have not been disclosed, the communication with a domain associated with malicious activity indicates a high potential for exploitation. It is crucial to address this vulnerability promptly.
