Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007100

sonatype-2025-007100

Malicious Packages - Tue Nov 18 2025 [Info Stealer]

Published Nov 18, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190499.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190500.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190549.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	alicenpmpackage	9.9.9
npm	amazon-testpackage	0.0.1-security
npm	amazon-testpackage	0.0.1
npm	amazon-testpackage	1.0.0
npm	ancestry-unified-logger	80.0.0
npm	ancestry-unified-logger	81.0.0
npm	ancestry-unified-logger	82.0.0
npm	ancestry-unified-logger	83.0.0
npm	ancestry-unified-logger	84.0.0
npm	ancestry-unified-logger	85.0.0
npm	com.mixpanel.unity	3.4.0
npm	com.mixpanel.unity	4.5.3
npm	com.mixpanel.unity	5.5.3
npm	filifecycleserv-paypal	0.0.1
npm	filifecycleserv-paypal	1.0.0
npm	filifecycleserv-paypal	2.0.0
npm	filifecycleserv-paypal	3.0.0
npm	ke-moma	1.0.0
npm	ke-moma2	1.0.0
npm	wealthbox-marketing	0.0.1-security
npm	wealthbox-marketing	0.0.1
npm	wealthbox-marketing	1.0.0
npm	workvivo-chatbot	0.0.1-security
npm	workvivo-chatbot	0.0.1
npm	workvivo-chatbot	1.0.0
npm	workvivo-layout-extension	0.0.1-security
npm	workvivo-layout-extension	0.0.1
npm	workvivo-layout-extension	1.0.0

sonatype-2025-007100 | Components Impacted | Sonatype Guide | Sonatype Guide