Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004208

sonatype-2025-004208

Malicious Packages - Mon Oct 20 2025 [Dropper]

Published Oct 20, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49251.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	abeya-tg-api	0.0.1-security
npm	abeya-tg-api	1.0.0
npm	bael-god-admin	0.0.1-security
npm	bael-god-admin	1.0.0
npm	bael-god-api	0.0.1-security
npm	bael-god-api	1.0.0
npm	bael-god-thanks	0.0.1-security
npm	bael-god-thanks	1.0.0
npm	custom-telegram-bot-api	0.0.1-security
npm	custom-telegram-bot-api	1.0.0
npm	custom-tg-bot-plan	0.0.1-security
npm	custom-tg-bot-plan	1.0.0
npm	custom-tg-bot-plan	1.0.1
npm	icon-react-fork	0.0.1-security
npm	icon-react-fork	1.0.0

sonatype-2025-004208 | Components Impacted | Sonatype Guide | Sonatype Guide