Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004246

sonatype-2025-004246

Malicious Packages - Wed Oct 22 2025 [Dropper]

Published Oct 22, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	redirect-0g91q6	1.0.0
npm	redirect-1akzwg	1.0.0
npm	redirect-297vpk	1.0.0
npm	redirect-2n31kh	1.0.0
npm	redirect-3viu68	1.0.0
npm	redirect-4iyfat	1.0.0
npm	redirect-4nwrkg	1.0.0
npm	redirect-5k9q5v	1.0.1
npm	redirect-63cl4f	1.0.0
npm	redirect-7bqfg6	1.0.0
npm	redirect-7i00po	1.0.0
npm	redirect-7o1dl8	1.0.0
npm	redirect-7vw41m	1.0.0
npm	redirect-8py8qs	1.0.0
npm	redirect-a1gs61	1.0.0
npm	redirect-aw9itj	1.0.0
npm	redirect-ci4ynt	1.0.0
npm	redirect-clrm2u	1.0.0
npm	redirect-djzcig	1.0.0
npm	redirect-dna9sd	1.0.0
npm	redirect-dna9sd	1.0.1
npm	redirect-dravb9	1.0.0
npm	redirect-e761hq	1.0.0
npm	redirect-e7mmp7	1.0.0
npm	redirect-em2jwn	1.0.0
npm	redirect-f1wut9	1.0.0
npm	redirect-fhelhf	1.0.0
npm	redirect-g0akfn	1.0.0
npm	redirect-g7gn31	1.0.0
npm	redirect-gzixvc	1.0.0
npm	redirect-h0i672	1.0.0
npm	redirect-h0n7zp	1.0.0
npm	redirect-h1ow1m	1.0.0
npm	redirect-ht8x82	1.0.0
npm	redirect-hw4g1a	1.0.0
npm	redirect-hx522h	1.0.0
npm	redirect-i7qi90	1.0.0
npm	redirect-icp3vd	1.0.0
npm	redirect-icp3vd	1.0.1
npm	redirect-igk4sd	1.0.0
npm	redirect-jr2idt	1.0.0
npm	redirect-k4s26t	1.0.0
npm	redirect-k5j1u7	1.0.0
npm	redirect-l0m7on	1.0.0
npm	redirect-l6qi9e	1.0.0
npm	redirect-lbgja3	1.0.0
npm	redirect-lp2xe6	1.0.0
npm	redirect-nqfhsn	1.0.0
npm	redirect-nuyvwk	1.0.0
npm	redirect-nvss7q	1.0.0

sonatype-2025-004246 | Components Impacted | Sonatype Guide | Sonatype Guide