Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007125

sonatype-2025-007125

Malicious Packages - Wed Nov 19 2025 [Dropper]

Published Nov 20, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	@bob-kit/client	0.0.10
npm	@bob-kit/client	0.0.11
npm	@bob-kit/client	0.0.12
npm	@bob-kit/client	0.0.13
npm	@bob-kit/client	0.0.14
npm	@bob-kit/client	0.0.15
npm	@bob-kit/client	0.0.16
npm	@bob-kit/client	0.0.17
npm	@bob-kit/client	0.0.18
npm	@bob-kit/client	0.0.19
npm	@bob-kit/client	0.0.1
npm	@bob-kit/client	0.0.20
npm	@bob-kit/client	0.0.21
npm	@bob-kit/client	0.0.22
npm	@bob-kit/client	0.0.23
npm	@bob-kit/client	0.0.24
npm	@bob-kit/client	0.0.25
npm	@bob-kit/client	0.0.26
npm	@bob-kit/client	0.0.27
npm	@bob-kit/client	0.0.28
npm	@bob-kit/client	0.0.29
npm	@bob-kit/client	0.0.2
npm	@bob-kit/client	0.0.30
npm	@bob-kit/client	0.0.31
npm	@bob-kit/client	0.0.32
npm	@bob-kit/client	0.0.33
npm	@bob-kit/client	0.0.35
npm	@bob-kit/client	0.0.3
npm	@bob-kit/client	0.0.4
npm	@bob-kit/client	0.0.5
npm	@bob-kit/client	0.0.6
npm	@bob-kit/client	0.0.7
npm	@bob-kit/client	0.0.8
npm	@bob-kit/client	0.0.9

sonatype-2025-007125 | Components Impacted | Sonatype Guide | Sonatype Guide