Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004359

sonatype-2025-004359

Malicious Packages - Thu Oct 30 2025 [Credential Info Stealer]

Published Oct 30, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-66551.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	four-sdk-aes-ipheriv	1.0.0
npm	four-sdk-aes-ipheriv	1.0.1
npm	tensor-fi-utils-core	1.0.2
npm	tensor-fi-utils-core	1.3.0
npm	tensor-fi-utils-lib	0.0.1-security
npm	tensor-fi-utils-lib	1.0.0
npm	tensor-fi-utils-lib	1.0.1
npm	tensor-fi-utils-lib	1.1.2
npm	tensor-fi-utils-lib	1.1.3
npm	tensor-fi-utils-lib	1.2.0
npm	tensor-fi-utils-lib	1.2.2
npm	tensor-fi-utils-lib	1.2.3
npm	tensor-fi-utils-lib	1.2.5
npm	tensor-fi-utils-lib	1.2.6
npm	tensor-fi-utils-lib	1.2.7
npm	tensor-fi-utils-lib	1.2.8
npm	tensor-fi-utils-lib	1.2.9
npm	tensor-fi-utils-lib	1.3.0
npm	tensor-fi-utils-lib	1.3.1
npm	tensor-fi-utils-lib	1.3.2
npm	tensor-fi-utils-lib	1.3.3
npm	tensor-fi-utils-lib	1.3.4
npm	tensor-fi-utils-lib	1.3.5
npm	tensorfi-secure-hash	1.0.0
npm	tensorfi-secure-hash	1.1.0

sonatype-2025-004359 | Components Impacted | Sonatype Guide | Sonatype Guide