Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-007137
sonatype-2025-007137
Malicious Packages - Thu Nov 20 2025 [Info Stealer]
Published Nov 20, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
CVSS Score
Medium
5.3
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
dise-pkt
1.0.2
npm
flip-prx
1.0.2
npm
mayhem-wma
0.0.1-security
npm
mayhem-wma
1.0.1
npm
mcp-polymarket
0.0.1-security
npm
mcp-polymarket
0.5.2
npm
mcp-polymarket
0.5.3
npm
portal-aes
1.3.3
npm
portal-lim
1.3.4
npm
portal-lime
2.1.3
npm
portal-lise
2.1.4
npm
xrpl-api
3.7.21
1-12 of 12
sonatype-2025-007137 | Components Impacted | Sonatype Guide | Sonatype Guide
