Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004504

sonatype-2025-004504

Malicious Packages - Mon Nov 10 2025 [RCE]

Published Nov 10, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	loliloli	0.0.1-security
npm	loliloli	1.0.0
npm	loliloli	1.0.100
npm	loliloli	1.0.101
npm	loliloli	1.0.102
npm	loliloli	1.0.103
npm	loliloli	1.0.104
npm	loliloli	1.0.105
npm	loliloli	1.0.106
npm	loliloli	1.0.107
npm	loliloli	1.0.108
npm	loliloli	1.0.10
npm	loliloli	1.0.11
npm	loliloli	1.0.12
npm	loliloli	1.0.13
npm	loliloli	1.0.14
npm	loliloli	1.0.15
npm	loliloli	1.0.16
npm	loliloli	1.0.17
npm	loliloli	1.0.18
npm	loliloli	1.0.19
npm	loliloli	1.0.1
npm	loliloli	1.0.20
npm	loliloli	1.0.21
npm	loliloli	1.0.22
npm	loliloli	1.0.23
npm	loliloli	1.0.24
npm	loliloli	1.0.25
npm	loliloli	1.0.26
npm	loliloli	1.0.27
npm	loliloli	1.0.28
npm	loliloli	1.0.29
npm	loliloli	1.0.2
npm	loliloli	1.0.30
npm	loliloli	1.0.31
npm	loliloli	1.0.32
npm	loliloli	1.0.33
npm	loliloli	1.0.34
npm	loliloli	1.0.35
npm	loliloli	1.0.36
npm	loliloli	1.0.37
npm	loliloli	1.0.38
npm	loliloli	1.0.39
npm	loliloli	1.0.3
npm	loliloli	1.0.40
npm	loliloli	1.0.41
npm	loliloli	1.0.42
npm	loliloli	1.0.43
npm	loliloli	1.0.44
npm	loliloli	1.0.45

sonatype-2025-004504 | Components Impacted | Sonatype Guide | Sonatype Guide