sonatype-2025-007251

Potentially Unwanted Application - [Shai-Hulud] [Hijack]

Published Nov 24, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreMedium

5.3

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007251

Potentially Unwanted Application - [Shai-Hulud] [Hijack]

Published Nov 24, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreMedium

5.3


npm	02-echo	0.0.7
npm	@accordproject/concerto-analysis	3.24.1
npm	@accordproject/concerto-linter	3.24.1
npm	@accordproject/concerto-linter-default-ruleset	3.24.1
npm	@accordproject/concerto-metamodel	3.12.5
npm	@accordproject/concerto-types	3.24.1
npm	@accordproject/markdown-it-cicero	0.16.26
npm	@accordproject/template-engine	2.7.2
npm	@actbase/css-to-react-native-transform	1.0.3
npm	@actbase/native	0.1.32
npm	@actbase/node-server	1.1.19
npm	@actbase/react-absolute	0.8.3
npm	@actbase/react-daum-postcode	1.0.5
npm	@actbase/react-kakaosdk	0.9.27
npm	@actbase/react-native-actionsheet	1.0.3
npm	@actbase/react-native-devtools	0.1.3
npm	@actbase/react-native-fast-image	8.5.13
npm	@actbase/react-native-kakao-channel	1.0.2
npm	@actbase/react-native-kakao-navi	2.0.4
npm	@actbase/react-native-less-transformer	1.0.6
npm	@actbase/react-native-naver-login	1.0.1
npm	@actbase/react-native-simple-video	1.0.13
npm	@actbase/react-native-tiktok	1.1.3
npm	@afetcan/api	0.0.13
npm	@afetcan/storage	0.0.27
npm	@alaan/s2s-auth	2.0.3
npm	@alexadark/amadeus-api	1.0.4
npm	@alexadark/gatsby-theme-events	1.0.1
npm	@alexadark/gatsby-theme-wordpress-blog	2.0.1
npm	@alexadark/reusable-functions	1.5.1
npm	@alexcolls/nuxt-socket.io	0.0.7
npm	@alexcolls/nuxt-socket.io	0.0.8
npm	@alexcolls/nuxt-ux	0.6.1
npm	@alexcolls/nuxt-ux	0.6.2
npm	@antstackio/eslint-config-antstack	0.0.3
npm	@antstackio/express-graphql-proxy	0.2.8
npm	@antstackio/graphql-body-parser	0.1.1
npm	@antstackio/json-to-graphql	1.0.3
npm	@antstackio/shelbysam	1.1.7
npm	@aryanhussain/my-angular-lib	0.0.23
npm	@asyncapi/avro-schema-parser	3.0.25
npm	@asyncapi/avro-schema-parser	3.0.26
npm	@asyncapi/bundler	0.6.5
npm	@asyncapi/bundler	0.6.6
npm	@asyncapi/cli	4.1.2
npm	@asyncapi/cli	4.1.3
npm	@asyncapi/converter	1.6.3
npm	@asyncapi/converter	1.6.4
npm	@asyncapi/diff	0.5.1
npm	@asyncapi/diff	0.5.2

Ecosystem	Package	Version


npm	02-echo	0.0.7
npm	@accordproject/concerto-analysis	3.24.1
npm	@accordproject/concerto-linter	3.24.1
npm	@accordproject/concerto-linter-default-ruleset	3.24.1
npm	@accordproject/concerto-metamodel	3.12.5
npm	@accordproject/concerto-types	3.24.1
npm	@accordproject/markdown-it-cicero	0.16.26
npm	@accordproject/template-engine	2.7.2
npm	@actbase/css-to-react-native-transform	1.0.3
npm	@actbase/native	0.1.32
npm	@actbase/node-server	1.1.19
npm	@actbase/react-absolute	0.8.3
npm	@actbase/react-daum-postcode	1.0.5
npm	@actbase/react-kakaosdk	0.9.27
npm	@actbase/react-native-actionsheet	1.0.3
npm	@actbase/react-native-devtools	0.1.3
npm	@actbase/react-native-fast-image	8.5.13
npm	@actbase/react-native-kakao-channel	1.0.2
npm	@actbase/react-native-kakao-navi	2.0.4
npm	@actbase/react-native-less-transformer	1.0.6
npm	@actbase/react-native-naver-login	1.0.1
npm	@actbase/react-native-simple-video	1.0.13
npm	@actbase/react-native-tiktok	1.1.3
npm	@afetcan/api	0.0.13
npm	@afetcan/storage	0.0.27
npm	@alaan/s2s-auth	2.0.3
npm	@alexadark/amadeus-api	1.0.4
npm	@alexadark/gatsby-theme-events	1.0.1
npm	@alexadark/gatsby-theme-wordpress-blog	2.0.1
npm	@alexadark/reusable-functions	1.5.1
npm	@alexcolls/nuxt-socket.io	0.0.7
npm	@alexcolls/nuxt-socket.io	0.0.8
npm	@alexcolls/nuxt-ux	0.6.1
npm	@alexcolls/nuxt-ux	0.6.2
npm	@antstackio/eslint-config-antstack	0.0.3
npm	@antstackio/express-graphql-proxy	0.2.8
npm	@antstackio/graphql-body-parser	0.1.1
npm	@antstackio/json-to-graphql	1.0.3
npm	@antstackio/shelbysam	1.1.7
npm	@aryanhussain/my-angular-lib	0.0.23
npm	@asyncapi/avro-schema-parser	3.0.25
npm	@asyncapi/avro-schema-parser	3.0.26
npm	@asyncapi/bundler	0.6.5
npm	@asyncapi/bundler	0.6.6
npm	@asyncapi/cli	4.1.2
npm	@asyncapi/cli	4.1.3
npm	@asyncapi/converter	1.6.3
npm	@asyncapi/converter	1.6.4
npm	@asyncapi/diff	0.5.1
npm	@asyncapi/diff	0.5.2

Find vulnerabilities. Fix fast with AI.

sonatype-2025-007251

sonatype-2025-007251