Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004223

sonatype-2025-004223

Malicious Packages - Tue Oct 21 2025 [Dropper]

Published Oct 21, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	@agentpmt/mcp-router	1.0.0
npm	@agentpmt/mcp-router	1.0.1
npm	@agentpmt/mcp-router	1.0.2
npm	@agentpmt/mcp-router	1.0.3
npm	@agentpmt/mcp-router	1.0.4
npm	@agentpmt/mcp-router	1.0.5
npm	@agentpmt/mcp-router	1.1.0
npm	@agentpmt/mcp-router	1.1.10
npm	@agentpmt/mcp-router	1.1.1
npm	@agentpmt/mcp-router	1.1.2
npm	@agentpmt/mcp-router	1.1.3
npm	@agentpmt/mcp-router	1.1.4
npm	@agentpmt/mcp-router	1.1.5
npm	@agentpmt/mcp-router	1.1.6
npm	@agentpmt/mcp-router	1.1.7
npm	@agentpmt/mcp-router	1.1.8
npm	@agentpmt/mcp-router	1.1.9

sonatype-2025-004223 | Components Impacted | Sonatype Guide | Sonatype Guide