Malicious Code Detected in sendbird-visual-test: A Critical Security Alert
Summary
MAL-2025-6804: Malicious code in sendbird-visual-test (npm). Affects sendbird-visual-test versions 11001.0.1 – 11005.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'sendbird-visual-test' package is an npm library designed for visual testing within applications. It is utilized by developers to ensure that user interfaces render correctly across different devices and browsers. However, recent analyses have revealed that certain versions of this package contain malicious code that compromises security.
Vulnerability Detail
The vulnerability originates from the package 'sendbird-visual-test' in versions 11001.0.1, 11004.0.1, and 11005.0.1. It is classified as malicious due to its communication with domains associated with harmful activities and its execution of commands that can lead to unauthorized actions within an application. This poses significant risks, including data breaches and system compromises.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall sendbird-visual-testIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If immediate updating is not feasible, consider removing the package from your project until a secure version is released. You can do this by running: npm uninstall sendbird-visual-test.
Conclusion
The 'sendbird-visual-test' package has been identified as malicious, posing significant security risks to applications that utilize it. Immediate action is required to update or remove the affected versions to safeguard your application from potential threats.
See every vulnerability recorded for sendbird-visual-test →
FAQ
The package communicates with domains linked to malicious activities and executes commands that can compromise application security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application using the Vulert playground at Vulert Scanner.
The affected versions include 11001.0.1, 11004.0.1, and 11005.0.1.
Yes, updating to the latest version of the package will help mitigate the risk associated with this vulnerability.
As a temporary measure, consider uninstalling the package until a secure version is available.
