Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007463

sonatype-2025-007463

Malicious Packages - Sat Dec 06 2025 [Credential Info Stealer]

Published Dec 8, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-191977.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	elf-stats-rooftop-stockpile-626	0.0.1-security
npm	elf-stats-rooftop-stockpile-626	99.0.0
npm	elf-stats-rooftop-stockpile-626	99.0.10
npm	elf-stats-rooftop-stockpile-626	99.0.11
npm	elf-stats-rooftop-stockpile-626	99.0.12
npm	elf-stats-rooftop-stockpile-626	99.0.13
npm	elf-stats-rooftop-stockpile-626	99.0.14
npm	elf-stats-rooftop-stockpile-626	99.0.1
npm	elf-stats-rooftop-stockpile-626	99.0.2
npm	elf-stats-rooftop-stockpile-626	99.0.3
npm	elf-stats-rooftop-stockpile-626	99.0.4
npm	elf-stats-rooftop-stockpile-626	99.0.5
npm	elf-stats-rooftop-stockpile-626	99.0.6
npm	elf-stats-rooftop-stockpile-626	99.0.7
npm	elf-stats-rooftop-stockpile-626	99.0.8
npm	elf-stats-rooftop-stockpile-626	99.0.9

sonatype-2025-007463 | Components Impacted | Sonatype Guide | Sonatype Guide