Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004184

sonatype-2025-004184

Malicious Packages - Fri Oct 17 2025 [Credential Info Stealer]

Published Oct 17, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	deere-ui	0.0.1-security
npm	deere-ui	97.1.0
npm	deere-ui-analytics-events	0.0.1-security
npm	deere-ui-analytics-events	97.1.0
npm	deere-ui-cache	0.0.1-security
npm	deere-ui-cache	97.1.0
npm	deere-ui-namespace	0.0.1-security
npm	deere-ui-namespace	97.1.0
npm	deere-ui-svg-to-react	0.0.1-security
npm	deere-ui-svg-to-react	97.1.0
npm	energy-portal	97.1.0
npm	ews-paze-toolkit	0.0.1-security
npm	ews-paze-toolkit	97.1.0
npm	isg-iwp-web-client	0.0.1-security
npm	isg-iwp-web-client	97.1.0
npm	monzo-com	0.0.1-security
npm	monzo-com	97.1.0
npm	shopify-logistics	1.0.0
npm	shopify-logistics	97.31.0
npm	shopify-ruby	1.0.0
npm	shopify-ruby	97.1.0
npm	taxify-work-profile	97.1.0

sonatype-2025-004184 | Components Impacted | Sonatype Guide | Sonatype Guide