Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004284

sonatype-2025-004284

Malicious Packages - Fri Oct 24 2025 [Info Stealer]

Published Oct 24, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48601.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	ajna-rewards-snapshot	1337.1.0
npm	binance-connector-js	0.0.1-security
npm	binance-connector-js	2.0.0
npm	canary-ng	1337.1.0
npm	cloud-data	0.0.1-security
npm	cloud-data	2.0.0
npm	cooler-loans-api-generate	0.0.1-security
npm	cooler-loans-api-generate	1337.1.0
npm	cooler-loans-api-get	0.0.1-security
npm	cooler-loans-api-get	1337.1.0
npm	feature-reporter	0.0.1-security
npm	feature-reporter	2.0.0
npm	gear-bridge-common	1337.1.0
npm	gear-js-util	1337.1.0
npm	graphclient	1337.1.0
npm	node-sdk-input-validation	320.0.0
npm	node-sdk-input-validation	321.0.0
npm	npmrunnode-fetch-test	1337.1.0
npm	orderbook-backend	1337.1.0
npm	orderbook-sdk	1337.1.0

sonatype-2025-004284 | Components Impacted | Sonatype Guide | Sonatype Guide