Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-004105
sonatype-2025-004105
Malicious Packages - Fri Oct 10 2025 [Info Stealer/Host Data]
Published Oct 10, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
CVSS Score
Medium
5.3
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
@jdei/codmi-figma-test
0.0.1-security
npm
@jdei/codmi-figma-test
0.0.2
npm
@jdei/codmi-figma-test
0.0.3
npm
@jdei/codmi-figma-test
0.0.4
npm
@jdei/codmi-figma-test
0.0.5
npm
@jdei/codmi-figma-test
0.0.6
npm
@jdei/codmi-figma-test
0.0.7
npm
@jdei/codmi-figma-test
0.0.8
npm
@jdei/codmi-figma-test
0.0.9
npm
@jdtaro/dynamic-devtools-utils
0.0.1-security
npm
@jdtaro/dynamic-devtools-utils
0.0.2
npm
@jdtaro/dynamic-devtools-utils
0.0.3
npm
@jdtaro/dynamic-devtools-utils
0.0.4
npm
ab-test-wordpress
1.18.3
npm
ab-testing-for-wp
0.0.1-security
npm
ab-testing-for-wp
1.18.3
npm
artyfact-storage
0.0.1-security
npm
artyfact-storage
5.0.0
npm
berachain-metadata
1.0.1
npm
coinpayments-api
1.0.1
npm
crisp-import-conversations
1.8.2
npm
defisaver-v3-contracts
3.1.6
npm
dforce-staking-v2
0.0.2
npm
frame-minter-contracts
0.0.1
npm
ghosts3c
0.0.2
npm
ghosts3c
0.0.3
npm
harvest-strategy
1.0.1
npm
harvest-strategy-arbitrum
1.0.1
npm
hzero-ued-icon
0.0.1-security
npm
hzero-ued-icon
2.0.0
npm
hzero-ued-icon
99.0.1
npm
mag-client
2.5.71
npm
next.js-localized
0.0.1
npm
pocketnet
1.9.9
npm
sensay-cli
2.0.1
npm
spot-electron-sdk
1.0.0
npm
spot-electron-sdk
2.0.5
npm
voting-client-js
1.4.5
npm
wwemix-contract
1.0.1
npm
zksync-root
1.0.1
1-40 of 40
sonatype-2025-004105 | Components Impacted | Sonatype Guide | Sonatype Guide