sonatype-2025-004247

Malicious Packages - Wed Oct 22 2025 [Info Stealer/Host Data]

Published Oct 22, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191578.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191579.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48549.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004247

Malicious Packages - Wed Oct 22 2025 [Info Stealer/Host Data]

Published Oct 22, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191578.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191579.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48549.json

CVSS ScoreMedium

5.3


npm	cucumber-js-cypress-cucumber	0.0.1-security
npm	cucumber-js-cypress-cucumber	2.0.0
npm	cypress-typescript	0.0.1-security
npm	cypress-typescript	2.0.0
npm	datadog-eventhub-forwarder	2.1.0
npm	doppler-secrets-fetch-github-action	0.0.1-security
npm	doppler-secrets-fetch-github-action	7.0.0
npm	doppler-secrets-fetch-github-action	7.0.1
npm	global-utils-helper-2025	1.0.0
npm	global-utils-helper-2025	1.0.1
npm	infobip-calls-showcase	0.0.1-security
npm	infobip-calls-showcase	1.0.1
npm	integration-date	1.0.0
npm	lbank-connector	1.0.0
npm	lbank-connector-nodejs	1.0.0
npm	lbank-connector-nodejs	2.0.0
npm	m0chan-does-notexist	0.0.1-security
npm	m0chan-does-notexist	1.0.0
npm	m0chan-does-notexist	1.1.5
npm	m0chan-does-notexist	1.1.6
npm	m0chan-does-notexist	99.99.1
npm	m0chan-does-notexist	99.99.2
npm	m0chan-does-notexist	99.99.5
npm	node-js-playwright-browserstack	0.0.1-security
npm	node-js-playwright-browserstack	2.0.0
npm	o3-storybook	0.0.1-security
npm	o3-storybook	1.0.0
npm	pr0f0x01	0.0.1-security
npm	pr0f0x01	1.0.0
npm	pr0f0x01	1.1.1
npm	puppeteer-jest	0.0.1-security
npm	puppeteer-jest	2.0.0
npm	purchases-roku	0.0.1-security
npm	purchases-roku	1.0.0
npm	replit-desktop-release-server	0.0.1-security
npm	replit-desktop-release-server	1.0.0
npm	response-uppercase	0.0.1-security
npm	response-uppercase	2.0.1
npm	tchap-landing-page	0.0.1-security
npm	tchap-landing-page	7.0.1
npm	tchap-landing-page	7.0.2
npm	tchap-landing-page	7.0.3
npm	tchap-landing-page	7.0.4
npm	test-all1	1.0.0
npm	test-all2	1.0.0
npm	tps-lookup	0.0.1-security
npm	tps-lookup	2.0.0
npm	twilio-live-interactive-audio	0.0.1-security
npm	twilio-live-interactive-audio	1.0.0
npm	twilio-live-interactive-audio	1.1.0

Ecosystem	Package	Version


npm	cucumber-js-cypress-cucumber	0.0.1-security
npm	cucumber-js-cypress-cucumber	2.0.0
npm	cypress-typescript	0.0.1-security
npm	cypress-typescript	2.0.0
npm	datadog-eventhub-forwarder	2.1.0
npm	doppler-secrets-fetch-github-action	0.0.1-security
npm	doppler-secrets-fetch-github-action	7.0.0
npm	doppler-secrets-fetch-github-action	7.0.1
npm	global-utils-helper-2025	1.0.0
npm	global-utils-helper-2025	1.0.1
npm	infobip-calls-showcase	0.0.1-security
npm	infobip-calls-showcase	1.0.1
npm	integration-date	1.0.0
npm	lbank-connector	1.0.0
npm	lbank-connector-nodejs	1.0.0
npm	lbank-connector-nodejs	2.0.0
npm	m0chan-does-notexist	0.0.1-security
npm	m0chan-does-notexist	1.0.0
npm	m0chan-does-notexist	1.1.5
npm	m0chan-does-notexist	1.1.6
npm	m0chan-does-notexist	99.99.1
npm	m0chan-does-notexist	99.99.2
npm	m0chan-does-notexist	99.99.5
npm	node-js-playwright-browserstack	0.0.1-security
npm	node-js-playwright-browserstack	2.0.0
npm	o3-storybook	0.0.1-security
npm	o3-storybook	1.0.0
npm	pr0f0x01	0.0.1-security
npm	pr0f0x01	1.0.0
npm	pr0f0x01	1.1.1
npm	puppeteer-jest	0.0.1-security
npm	puppeteer-jest	2.0.0
npm	purchases-roku	0.0.1-security
npm	purchases-roku	1.0.0
npm	replit-desktop-release-server	0.0.1-security
npm	replit-desktop-release-server	1.0.0
npm	response-uppercase	0.0.1-security
npm	response-uppercase	2.0.1
npm	tchap-landing-page	0.0.1-security
npm	tchap-landing-page	7.0.1
npm	tchap-landing-page	7.0.2
npm	tchap-landing-page	7.0.3
npm	tchap-landing-page	7.0.4
npm	test-all1	1.0.0
npm	test-all2	1.0.0
npm	tps-lookup	0.0.1-security
npm	tps-lookup	2.0.0
npm	twilio-live-interactive-audio	0.0.1-security
npm	twilio-live-interactive-audio	1.0.0
npm	twilio-live-interactive-audio	1.1.0

Find vulnerabilities. Fix fast with AI.

sonatype-2025-004247

sonatype-2025-004247