Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007143

sonatype-2025-007143

Malicious Packages - Thu Nov 20 2025 [Credential Info Stealer]

Published Nov 20, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	calculator-0c8f	1.0.0
npm	calculator-0c8f	1.1.1
npm	calculator-40ed	4.0.0
npm	calculator-40ed	5.0.0
npm	calculator-b83e	1.0.0
npm	node-calculator-26d7	2.1.0
npm	node-calculator-26d7	2.1.1
npm	node-calculator-26d7	3.0.0
npm	node-calculator-31b9	2.1.1
npm	node-calculator-31b9	2.1.2
npm	node-calculator-33ab	3.0.0
npm	node-calculator-40ed	5.0.0
npm	node-calculator-4b83	2.1.1
npm	node-calculator-8bf9	2.1.1
npm	node-calculator-8c32	1.0.0
npm	node-calculator-8c32	3.0.0
npm	node-calculator-ab3c	2.1.1
npm	node-calculator-ab3c	2.1.2
npm	node-calculator-b0e4	2.1.2
npm	node-calculator-b0e4	2.1.3
npm	node-calculator-c488	2.1.1
npm	node-calculator-c488	2.1.2
npm	node-calculator-cf8c	2.1.2
npm	node-calculator-ef78	2.1.2
npm	node-calculator-fbb8	2.1.1

sonatype-2025-007143 | Components Impacted | Sonatype Guide | Sonatype Guide