Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004199

sonatype-2025-004199

Malicious Packages - Fri Oct 17 2025 [Info Stealer]

Published Oct 17, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@erfix/frontend-logge	8.0.0
npm	@erfix/frontend-logger	8.0.0
npm	mediapipe	0.0.1-security
npm	mediapipe	1.0.0
npm	mediapipe	1.0.1
npm	mediapipe	1.0.2
npm	mediapipe	1.0.3
npm	mediapipe	1.0.4
npm	mediapipe	1.0.5
npm	mediapipe	1.0.6
npm	mediapipe	1.0.7
npm	mediapipe	1.0.8
npm	mediapipe	1.0.9
npm	mediapipe	1.1.0
npm	mediapipe	1.1.1
npm	mediapipe	1.1.2
npm	mediapipe	1.1.3
npm	mediapipe	1.1.4
npm	mediapipe	1.1.5
npm	mediapipe	1.1.6
npm	mediapipe	1.1.7
npm	mediapipe	1.1.8
npm	mediapipe	1.1.9
npm	mediapipe	1.2.0
npm	mediapipe	1.2.1
npm	mediapipe	1.2.2
npm	mediapipe	1.2.3
npm	mediapipe	1.2.4
npm	mediapipe	1.2.5
npm	mediapipe	1.2.6
npm	mediapipe	1.2.7
npm	mediapipe	1.2.8
npm	mediapipe	1.2.9
npm	mediapipe	1.3.0
npm	mediapipe	1.3.1
npm	mediapipe	1.3.2
npm	mediapipe	1.3.3
npm	mediapipe	1.3.4
npm	mediapipe	1.3.5
npm	vn-hrm	1.0.0

sonatype-2025-004199 | Components Impacted | Sonatype Guide | Sonatype Guide