Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004152

sonatype-2025-004152

Malicious Packages - Tue Oct 14 2025 [RCE]

Published Oct 15, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	@igh/server-updater-ssh	1.0.0
npm	@igh/server-updater-ssh	1.0.1
npm	@igh/server-updater-ssh	1.0.2
npm	@igh/server-updater-ssh	1.0.5
npm	@igh/server-updater-ssh	1.0.6
npm	@igh/server-updater-ssh	1.1.0
npm	@igh/server-updater-ssh	1.1.1
npm	@igh/server-updater-ssh	1.1.2
npm	@igh/server-updater-ssh	1.1.3
npm	@igh/server-updater-ssh	1.2.0
npm	@igh/server-updater-ssh	1.2.12
npm	@igh/server-updater-ssh	1.2.16
npm	@igh/server-updater-ssh	1.2.1
npm	@igh/server-updater-ssh	1.2.22
npm	@igh/server-updater-ssh	1.2.2
npm	@igh/server-updater-ssh	1.2.3
npm	@igh/server-updater-ssh	1.2.4
npm	@igh/server-updater-ssh	1.2.9
npm	@igh/server-updater-ssh-l1	1.2.13
npm	@igh/server-updater-ssh-l1	1.2.17
npm	@igh/server-updater-ssh-l2	1.2.14
npm	@igh/server-updater-ssh-l2	1.2.18
npm	@igh/server-updater-ssh-l2	1.2.28

sonatype-2025-004152 | Components Impacted | Sonatype Guide | Sonatype Guide