The US is contemplating banning TP-Link internet routers in 2025. The potential decision is based on security risks the routers pose, according to a report in the Wall Street Journal.

The routers are made by a Chinese company and are more vulnerable to malware attacks than other routers. Three US agencies, including the Departments of Justice, Defense, and Commerce, are looking into the TP-Link routers, the Journal said.

Several different US agencies use TP-Link routers, including NASA and the Department of Defense. They are also very popular with consumers thanks to their low costs.

The routers were found to be a vehicle of cyber attacks, according to a research report by Microsoft in October.

“Microsoft tracks a network of compromised small office and home office (SOHO) routers as CovertNetwork-1658,” Microsoft said in the report. SOHO routers manufactured by TP-Link make up most of this network. Microsoft uses “CovertNetwork” to refer to a collection of egress IPs consisting of compromised or leased devices that may be used by one or more threat actors.”

TP-Link dismissed the claim that its routers present a threat to routers in homes or used by small businesses.

“Our security practices are fully in line with industry security standards in the US,” the company said to CBS. “We implement rigorous secure product development and testing processes, and take timely and appropriate action to mitigate known vulnerabilities.”

In the Journal, TP_Link pledged to work with the US government to ensure its routers are secure.

“(We are open to) opportunities to engage with the federal government to demonstrate that our security practices are fully in line with industry security standards, and to demonstrate our ongoing commitment to the American market, American consumers and addressing US national security risks.”

Any legislative decision will likely occur during the Trump administration. The President-elect has said he plans to clamp down on Chinese goods and impose tariffs on products from China.