Critical Malicious Code Vulnerability in solarapatcher Package
Summary
MAL-2025-6657: Malicious code in solarapatcher (npm). Affects solarapatcher versions 1.7.6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The solarapatcher package is an npm library designed to facilitate the patching of solar energy systems. It provides functionalities for managing and applying updates to solar system software. However, this package has been found to contain malicious code that can compromise user systems, making it critical for users to be aware of this vulnerability.
Vulnerability Detail
The vulnerability identified as MAL-2025-6657 originates from a malicious code injection in version 1.7.6 of the solarapatcher package. This code can potentially allow unauthorized access to user systems, leading to data breaches or system manipulation. The malicious code was discovered by ReversingLabs and is documented in their database, indicating a serious threat to users who have installed this version of the package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall solarapatcherIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can remove the solarapatcher package from their project until a safe version is confirmed. This can be done using the command: 'npm uninstall solarapatcher'.
Conclusion
The solarapatcher package has been identified with a critical vulnerability due to malicious code in version 1.7.6. Users are urged to update their packages promptly and consider using Vulert for real-time monitoring of vulnerabilities in their software.
See every vulnerability recorded for solarapatcher →
FAQ
The solarapatcher package is an npm library used for managing and applying updates to solar energy system software.
MAL-2025-6657 refers to a malicious code injection in version 1.7.6 of the solarapatcher package that can compromise user systems.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you are using version 1.7.6 of solarapatcher, you should update to a patched version immediately using 'npm update solarapatcher'.
The vulnerability was discovered by ReversingLabs, a cybersecurity firm specializing in threat detection.
