Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-007333
sonatype-2025-007333
Malicious Packages - Fri Nov 28 2025 [Credential Info Stealer]
Published Nov 28, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192415.json
CVSS Score
High
7.1
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
dise-pkt
1.0.2
npm
flip-prx
1.0.2
npm
mayhem-wma
1.0.1
npm
mcp-polymarket
0.5.2
npm
mcp-polymarket
0.5.3
npm
portal-aes
1.3.3
npm
portal-lim
0.0.1-security
npm
portal-lim
1.3.4
npm
portal-lime
2.1.3
npm
portal-lise
2.1.4
npm
xrpl-api
3.7.21
1-11 of 11
sonatype-2025-007333 | Components Impacted | Sonatype Guide | Sonatype Guide
