Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007370

sonatype-2025-007370

Malicious Packages - Thu Nov 27 2025 [Backdoor]

Published Dec 2, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	ip-report	0.0.10
npm	ip-report	0.0.11
npm	ip-report	0.0.12
npm	ip-report	0.0.13
npm	ip-report	0.0.14
npm	ip-report	0.0.15
npm	ip-report	0.0.16
npm	ip-report	0.0.17
npm	ip-report	0.0.18
npm	ip-report	0.0.19
npm	ip-report	0.0.1
npm	ip-report	0.0.20
npm	ip-report	0.0.21
npm	ip-report	0.0.22
npm	ip-report	0.0.23
npm	ip-report	0.0.24
npm	ip-report	0.0.25
npm	ip-report	0.0.26
npm	ip-report	0.0.27
npm	ip-report	0.0.28
npm	ip-report	0.0.29
npm	ip-report	0.0.2
npm	ip-report	0.0.30
npm	ip-report	0.0.31
npm	ip-report	0.0.33
npm	ip-report	0.0.34
npm	ip-report	0.0.36
npm	ip-report	0.0.37
npm	ip-report	0.0.38
npm	ip-report	0.0.39
npm	ip-report	0.0.3
npm	ip-report	0.0.40
npm	ip-report	0.0.45
npm	ip-report	0.0.4
npm	ip-report	0.0.5
npm	ip-report	0.0.6
npm	ip-report	0.0.9

sonatype-2025-007370 | Components Impacted | Sonatype Guide | Sonatype Guide