Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004295

sonatype-2025-004295

Malicious Packages - Mon Oct 27 2025 [Credential Info Stealer]

Published Oct 27, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2025-191631.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


pypi	hexdec	0.0.1
pypi	hexdecpy	0.0.1
pypi	hexdecpy	0.0.2
pypi	tronapinet	0.0.1
pypi	tronapipy	0.0.1
pypi	tronclient	0.0.1
pypi	tronclinet	0.0.1
pypi	tronclipy	0.0.1
pypi	trongithpy	0.0.1
pypi	trongitpy	0.0.1
pypi	trongridapi	0.0.1
pypi	trongridlib	0.0.1
pypi	trongridperm	0.0.1
pypi	trongridpy	0.0.1
pypi	tronhex	0.0.1
pypi	tronhexpy	0.0.1
pypi	tronkeep	0.0.1
pypi	tronkeeppy	0.0.1
pypi	tronkeypy	0.0.1
pypi	tronkeyspy	0.0.1
pypi	tronlast	0.0.1
pypi	tronlastpy	0.0.1
pypi	tronlib	0.0.1
pypi	tronlibapi	0.0.1
pypi	tronlibpy	0.0.1
pypi	tronlinkperm	0.0.1
pypi	tronlinkpy	0.0.1
pypi	tronnetpy	0.0.1
pypi	tronperm	0.0.1
pypi	tronpyapi	0.0.1
pypi	tronpynet	0.0.1
pypi	tronpyweb	0.0.1
pypi	tronwalletpy	0.0.1
pypi	tronwebwpy	0.0.1
pypi	tronyx	0.0.1

sonatype-2025-004295 | Components Impacted | Sonatype Guide | Sonatype Guide