Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-007461
sonatype-2025-007461
Malicious Packages - Sat Dec 06 2025 [Info Stealer]
Published Dec 8, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192167.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192257.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192274.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192287.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192479.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192483.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192501.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192513.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192536.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192783.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192790.json
CVSS Score
Medium
5.3
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
elf-stats-aurora-garland-656
1.0.0
npm
elf-stats-caroling-bow-570
1.0.0
npm
elf-stats-caroling-bow-570
1.0.1
npm
elf-stats-caroling-star-725
1.0.0
npm
elf-stats-caroling-workshop-885
5.4.3
npm
elf-stats-caroling-workshop-885
5.5.3
npm
elf-stats-caroling-workshop-885
5.6.3
npm
elf-stats-caroling-workshop-885
5.7.3
npm
elf-stats-caroling-workshop-885
5.8.3
npm
elf-stats-caroling-workshop-885
5.9.3
npm
elf-stats-caroling-workshop-885
5.9.4
npm
elf-stats-frostbitten-muffin-867
1.0.0
npm
elf-stats-joyous-saddlebag-967
1.0.0
npm
elf-stats-marzipan-nightcap-982
1.0.0
npm
elf-stats-midnight-saddlebag-720
1.0.0
npm
elf-stats-mulled-nightcap-782
1.0.1
npm
elf-stats-mulled-nightcap-782
1.0.2
npm
elf-stats-mulled-nightcap-782
1.0.3
npm
elf-stats-silvered-bow-679
1.0.0
npm
elf-stats-sprucey-giftbox-118
1.0.0
npm
elf-stats-storybook-cookiejar-481
999.0.0
npm
elf-stats-sugarplum-wishlist-141
1.0.0
npm
elf-stats-tinsel-nutcracker-112
1.0.0
npm
elf-stats-twinkling-ribbon-344
1.1.0
npm
elf-stats-twinkling-ribbon-344
2.1.0
npm
elf-stats-twinkling-ribbon-344
2.1.1
1-26 of 26
sonatype-2025-007461 | Components Impacted | Sonatype Guide | Sonatype Guide