Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-005197
sonatype-2025-005197
Malicious Packages - Thu Nov 13 2025 [Info Stealer]
Published Nov 13, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190490.json
CVSS Score
Medium
5.3
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
bitsight
1.0.9
npm
bitsight
1.1.1
npm
pentestlyio-testpackage
0.0.1-security
npm
pentestlyio-testpackage
0.0.1
npm
pentestlyio-testpackage
0.0.2
npm
really-do-not-install-this-plz
1.0.1
1-6 of 6
sonatype-2025-005197 | Components Impacted | Sonatype Guide | Sonatype Guide
