Malicious Code Detected in teamstelemetry Package - Vulnerability MAL-2025-6315
Summary
MAL-2025-6315: Malicious code in teamstelemetry (npm). Affects teamstelemetry versions >= 9.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The teamstelemetry package is an npm library designed to facilitate telemetry data collection and analysis for applications. It provides developers with tools to monitor application performance and user interactions. However, this package has been found to communicate with a domain associated with malicious activity, raising significant security concerns for users who integrate it into their projects.
Vulnerability Detail
The vulnerability identified as MAL-2025-6315 originates from the teamstelemetry package version 9.0.0 and later. It poses a risk as the package communicates with a domain linked to malicious activities, potentially leading to data breaches, unauthorized access, or other security threats. Users of this package should be aware that integrating it into their applications could expose them to various cyber threats, including data exfiltration and compromised application integrity.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall teamstelemetryIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, consider removing the teamstelemetry package from your project until a secure version is released. You can do this by executing: npm uninstall teamstelemetry. Additionally, monitor your application for any suspicious activity that may arise from its previous use.
Conclusion
The teamstelemetry package has been identified as having a serious vulnerability that could expose applications to malicious activities. Users are strongly advised to update or remove the package to safeguard their applications. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for teamstelemetry →
FAQ
The teamstelemetry package is an npm library used for collecting and analyzing telemetry data in applications.
This vulnerability indicates that the teamstelemetry package communicates with a domain known for malicious activities, posing security risks.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
If immediate updates are not possible, consider removing the package and monitoring your application for any unusual behavior.
Detailed information about the vulnerability can be found in the GitHub repository for malicious packages at https://github.com/ossf/malicious-packages.
