Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004154

sonatype-2025-004154

Malicious Packages - Wed Oct 15 2025 [Info Stealer/Host Data]

Published Oct 15, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191564.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191585.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48417.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48418.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48419.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48421.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48422.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	aps-configurator-inventor	2.0.0
npm	aps-simple-viewer-nodejs	2.0.0
npm	batchw-test-common-config	0.0.1-security
npm	batchw-test-common-config	1.1.0
npm	cryptocom-corp-tools	0.0.1-security
npm	cryptocom-corp-tools	999.999.999
npm	cryptocom-internal-auth	0.0.1-security
npm	cryptocom-internal-auth	999.999.999
npm	cryptocom-private-api	0.0.1-security
npm	cryptocom-private-api	999.999.999
npm	deficonnect-internal-utils	0.0.1-security
npm	deficonnect-internal-utils	999.999.999
npm	deficonnect-private-sdk	0.0.1-security
npm	deficonnect-private-sdk	999.999.999
npm	revit-to-ifc-scheduler	1.0.1

sonatype-2025-004154 | Components Impacted | Sonatype Guide | Sonatype Guide