Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004171

sonatype-2025-004171

Malicious Packages - Thu Oct 16 2025 [Info Stealer]

Published Oct 16, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48432.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	company-browser-package	99.9.10
npm	company-browser-package	99.9.9
npm	corp-ais-client-my-channel-lib	99.9.10
npm	corp-ais-client-my-channel-lib	99.9.9
npm	hyperion-react-native	0.0.1-security
npm	hyperion-react-native	1337.0.0
npm	internal-config	1.0.0
npm	internal-config	99.9.9
npm	internal-forc	99.9.9
npm	internal-plugin-lifecycle-card	99.9.10
npm	internal-plugin-lifecycle-card	99.9.9
npm	ios-signing-common	1337.0.0
npm	java-common	1337.0.0
npm	solhint-plugin-namechain	1337.0.0

sonatype-2025-004171 | Components Impacted | Sonatype Guide | Sonatype Guide