Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007148

sonatype-2025-007148

Malicious Packages - Thu Nov 20 2025 [Info Stealer]

Published Nov 21, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190550.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	security-testing-research-	1.0.8
npm	security-testing-research22	1.0.8
npm	security-testing-research22	1.0.9
npm	security-testing-research22	1.1.9
npm	security-testing-research99	1.0.6
npm	security-testing-research99	1.0.7
npm	security-testing-research99	1.0.8
npm	transparent-example-request99	1.0.0
npm	transparent-example-request99	1.0.1
npm	transparent-example-request99	1.0.2
npm	transparent-example-request99	1.0.3
npm	transparent-example-request99	1.0.4
npm	transparent-example-request99	1.0.5
npm	transparent-example-request99	1.0.6

sonatype-2025-007148 | Components Impacted | Sonatype Guide | Sonatype Guide