Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004334

sonatype-2025-004334

Malicious Packages - Wed Oct 29 2025 [Dropper] [BeaverTail] [Lazarus]

Published Oct 29, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	bind-error	1.0.0
npm	echats-js	2.4.2
npm	error-loggerjs	7.11.7
npm	error-loggerjs	7.11.8
npm	logger-extjs	1.0.0
npm	node-chart-config	2.4.2
npm	node-dev-config	3.1.2
npm	node-hs-logger	1.4.3
npm	node-nvm-ssh	1.0.1
npm	node-vite-config	1.0.0
npm	radix-ui-react-modal	1.1.14
npm	radix-ui-react-modal	1.1.16
npm	react-mandes	1.1.4
npm	react-medias	1.1.4
npm	react-resizable-text	1.3.2
npm	react-sideflow	2.5.3
npm	react-stateflow	3.7.3
npm	react-tchart	1.4.5
npm	react-tediter	1.4.3
npm	react-tmedia	2.1.4
npm	react-ui-animates	1.7.6
npm	react-ui-notify	1.7.3
npm	react-ui-toast	0.7.2
npm	redux-motion	1.8.3
npm	tailwind-config-view	1.0.3
npm	tailwind-state	1.0.3
npm	tailwind-style-override	1.0.3
npm	tailwind-widgets	5.1.3
npm	tailwindcss-forms	1.0.3
npm	vite-binding-js	7.11.8
npm	vite-commonjs-support	1.8.3
npm	vite-linting-js	1.0.1
npm	winstem-logging	1.0.1

sonatype-2025-004334 | Components Impacted | Sonatype Guide | Sonatype Guide