Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004206

sonatype-2025-004206

Malicious Packages - Mon Oct 20 2025 [Info Stealer]

Published Oct 20, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48461.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48463.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@shopify.com/shopifyql-parser	0.0.1-security
npm	@shopify.com/shopifyql-parser	3.400.9
npm	@shopify.com/shopifyql-parser	3.410.9
npm	@shopify.com/shopifyql-parser	3.999.9
npm	saifulhhacker.site-test	0.0.1-security
npm	saifulhhacker.site-test	1.199.0
npm	saifulhhacker.site-test	1.299.0
npm	saifulhhacker.site-test	1.399.0
npm	saifulhhacker.site-test	1.999.0
npm	shopifyql-parser	0.0.1-security
npm	shopifyql-parser	1.110.1
npm	shopifyql-parser	20.110.1

sonatype-2025-004206 | Components Impacted | Sonatype Guide | Sonatype Guide