Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-007410
sonatype-2025-007410
Malicious Packages - Thu Nov 27 2025 [Backdoor]
Published Dec 3, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191982.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192025.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192050.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192066.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192088.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192096.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192123.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192152.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192166.json
CVSS Score
High
8.7
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
elf-stats-aurora-drum-979
1.0.0
npm
elf-stats-aurora-drum-979
1.0.1
npm
elf-stats-cosy-wishlist-811
1.0.2
npm
elf-stats-evergreen-sled-681
1.0.0
npm
elf-stats-evergreen-sled-681
1.0.1
npm
elf-stats-evergreen-sled-681
1.0.2
npm
elf-stats-evergreen-sled-681
1.0.3
npm
elf-stats-evergreen-sled-681
1.0.4
npm
elf-stats-evergreen-sled-681
1.0.5
npm
elf-stats-ginger-bell-819
1.0.0
npm
elf-stats-ginger-hammer-326
1.0.3
npm
elf-stats-ginger-hammer-326
2.0.1
npm
elf-stats-ginger-ledger-106
1.0.1
npm
elf-stats-joyous-fireplace-187
1.0.0
npm
elf-stats-merry-sparkler-742
1.0.1
npm
elf-stats-midnight-mitten-226
1.0.0
npm
elf-stats-midnight-wreath-655
1.0.0
npm
elf-stats-midnight-wreath-655
1.0.1
npm
elf-stats-rooftop-garland-184
1.0.0
npm
elf-stats-rooftop-hammer-362
1.0.2
npm
elf-stats-snowdusted-bauble-104
1.0.0
npm
elf-stats-snowdusted-fireplace-396
1.0.0
npm
elf-stats-snowy-cookiejar-589
1.0.0
npm
elf-stats-snuggly-workshop-421
9999.0.2
npm
elf-stats-snuggly-workshop-421
9999.0.3
npm
elf-stats-snuggly-workshop-421
9999.0.5
npm
elf-stats-snuggly-workshop-421
9999.0.6
npm
elf-stats-snuggly-workshop-421
9999.0.7
npm
elf-stats-storybook-cookiejar-394
1.0.2
npm
elf-stats-whimsical-ledger-767
1.0.1
npm
elf-stats-whimsical-stockpile-524
1.0.0
1-31 of 31
sonatype-2025-007410 | Components Impacted | Sonatype Guide | Sonatype Guide
