Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007264

sonatype-2025-007264

Malicious Packages - Tue Nov 25 2025 [Credential Info Stealer]

Published Nov 25, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	doordash-ui	95.6.0
npm	epicgames-ui	1.0.0
npm	epicgames-ui	1.0.1
npm	epicgames-ui	1.0.2
npm	epicgames-ui	1.0.3
npm	epicgames-ui	1.0.4
npm	epicgames-ui	1.0.5
npm	epicgames-ui	1.0.6
npm	epicgames-ui	1.0.7
npm	epicgames-ui	1.0.8
npm	epicgames-ui	1.0.9
npm	epicgames-ui	2.0.0
npm	epicgames-ui	2.0.1
npm	epicgames-ui	2.0.2
npm	epicgames-ui	2.0.3
npm	epicgames-ui	2.0.4
npm	epicgames-ui	2.0.5
npm	epicgames-ui	291.8.0
npm	hilton-ui	296.8.0
npm	hyatt-ui	291.8.0
npm	instacart-ui	296.8.0
npm	linkedin-ui	85.8.0
npm	lyft-ui	85.8.0
npm	sentry-ui	296.8.0
npm	snapchat-ui	96.8.0
npm	uber-ui	95.6.0

sonatype-2025-007264 | Components Impacted | Sonatype Guide | Sonatype Guide