Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007412

sonatype-2025-007412

Malicious Packages - Wed Dec 03 2025 [Info Stealer]

Published Dec 3, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191668.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191949.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191971.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192572.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192581.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@testfei/hallo-word	0.0.1-security
npm	@testfei/hallo-word	1.0.0
npm	@testfei/hallo-word	1.0.1
npm	@testfei/hallo-word	1.0.3
npm	@testfei/hallo-word	1.0.4
npm	@testfei/hallo-word	1.0.5
npm	@testfei/hallo-word	1.0.6
npm	@testfei/hallo-word	1.0.7
npm	kmnb	1.0.0
npm	kmz1	1.0.0
npm	phx-core	0.0.1-security
npm	phx-core	1.0.0
npm	phx-core	9.0.0
npm	sds-auth-ui	0.0.1
npm	sds-oauth-client	0.0.1-security
npm	sds-oauth-client	0.0.1
npm	sds-swissid-common	0.0.1
npm	swissid-common	0.0.1
npm	swissid-common	1.0.0
npm	swissid-common	99.0.0
npm	wfui-dbd-react-ui	0.0.1-security
npm	wfui-dbd-react-ui	1.0.0
npm	wfui-dbd-react-ui	99.9.1

sonatype-2025-007412 | Components Impacted | Sonatype Guide | Sonatype Guide