Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004229

sonatype-2025-004229

Malicious Packages - Tue Oct 21 2025 [Dropper]

Published Oct 21, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49271.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49272.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	botty-fork-baby	0.0.1-security
npm	botty-fork-baby	1.0.0
npm	cursor-ai-fork	0.0.1-security
npm	cursor-ai-fork	1.0.0
npm	fork-spoon-fork	0.0.1-security
npm	fork-spoon-fork	1.0.0
npm	telegram-bot-start	0.0.1-security
npm	telegram-bot-start	1.0.0
npm	telegram-bot-starter	0.0.1-security
npm	telegram-bot-starter	1.0.0
npm	telegram-bot-starter	1.2.5
npm	telegram-bot-starter	1.2.6
npm	telegram-bot-starter	1.2.7
npm	telegram-bot-starter	1.2.8
npm	telegram-bot-starter	1.2.9
npm	telegram-bot-starter	1.3.4
npm	telegram-bot-starter	1.3.6
npm	telegram-bot-starter	1.3.7
npm	telegram-bot-starter	1.3.8
npm	telegram-bot-starter	1.3.9

sonatype-2025-004229 | Components Impacted | Sonatype Guide | Sonatype Guide