sonatype-2025-007468

Malicious Packages - Mon Dec 08 2025 [Dropper]

Published Dec 8, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2025-192322.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007468

Malicious Packages - Mon Dec 08 2025 [Dropper]

Published Dec 8, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2025-192322.json

CVSS ScoreHigh

8.7


npm	@shennmine/libsignal-node	2.0.10
npm	@shennmine/libsignal-node	2.0.11
npm	@shennmine/libsignal-node	2.0.12
npm	@shennmine/libsignal-node	2.0.13
npm	@shennmine/libsignal-node	2.0.15
npm	@shennmine/libsignal-node	2.0.16
npm	@shennmine/libsignal-node	2.0.17
npm	@shennmine/libsignal-node	2.0.18
npm	@shennmine/libsignal-node	2.0.19
npm	@shennmine/libsignal-node	2.0.1
npm	@shennmine/libsignal-node	2.0.20
npm	@shennmine/libsignal-node	2.0.21
npm	@shennmine/libsignal-node	2.0.22
npm	@shennmine/libsignal-node	2.0.2
npm	@shennmine/libsignal-node	2.0.3
npm	@shennmine/libsignal-node	2.0.4
npm	@shennmine/libsignal-node	2.0.5
npm	@shennmine/libsignal-node	2.0.6
npm	@shennmine/libsignal-node	2.0.7
npm	@shennmine/libsignal-node	2.0.8
npm	@shennmine/libsignal-node	2.0.9
npm	@shennmine/libsignal-node	2.1.2
npm	@shennmine/libsignal-node	2.1.4
npm	@shennmine/libsignal-node	2.1.5
npm	@shennmine/libsignal-node	2.1.6
npm	@shennmine/libsignal-node	2.1.7
npm	@shennmine/libsignal-node	2.1.8
npm	@shennmine/libsignal-node	2.1.9
npm	@shennmine/libsignal-node	2.2.0
npm	@shennmine/libsignal-node	2.2.1
npm	@shennmine/libsignal-node	2.2.2
npm	@shennmine/libsignal-node	2.2.3
npm	@shennmine/libsignal-node	2.2.4
npm	@shennmine/libsignal-node	2.2.5
npm	@shennmine/libsignal-node	2.2.6
npm	@xyuxu/i18never	0.0.1-security
npm	@xyuxu/i18never	999.0.104
npm	@xyuxu/i18never	999.0.105
npm	@xyuxu/i18never	999.0.106
pypi	joyboyw	1.0.0
pypi	joyboyw	1.0.1
npm	metro-evaluator	0.0.1-security
npm	metro-evaluator	1.0.0
npm	metro-evaluator	1.0.1
npm	metro-evaluator	1.0.2
npm	metro-evaluator	1.0.3
npm	smm-youtube	0.0.1-security
npm	smm-youtube	1.0.0
npm	smm-youtube	1.0.1
npm	smm-youtube	1.0.2

Ecosystem	Package	Version


npm	@shennmine/libsignal-node	2.0.10
npm	@shennmine/libsignal-node	2.0.11
npm	@shennmine/libsignal-node	2.0.12
npm	@shennmine/libsignal-node	2.0.13
npm	@shennmine/libsignal-node	2.0.15
npm	@shennmine/libsignal-node	2.0.16
npm	@shennmine/libsignal-node	2.0.17
npm	@shennmine/libsignal-node	2.0.18
npm	@shennmine/libsignal-node	2.0.19
npm	@shennmine/libsignal-node	2.0.1
npm	@shennmine/libsignal-node	2.0.20
npm	@shennmine/libsignal-node	2.0.21
npm	@shennmine/libsignal-node	2.0.22
npm	@shennmine/libsignal-node	2.0.2
npm	@shennmine/libsignal-node	2.0.3
npm	@shennmine/libsignal-node	2.0.4
npm	@shennmine/libsignal-node	2.0.5
npm	@shennmine/libsignal-node	2.0.6
npm	@shennmine/libsignal-node	2.0.7
npm	@shennmine/libsignal-node	2.0.8
npm	@shennmine/libsignal-node	2.0.9
npm	@shennmine/libsignal-node	2.1.2
npm	@shennmine/libsignal-node	2.1.4
npm	@shennmine/libsignal-node	2.1.5
npm	@shennmine/libsignal-node	2.1.6
npm	@shennmine/libsignal-node	2.1.7
npm	@shennmine/libsignal-node	2.1.8
npm	@shennmine/libsignal-node	2.1.9
npm	@shennmine/libsignal-node	2.2.0
npm	@shennmine/libsignal-node	2.2.1
npm	@shennmine/libsignal-node	2.2.2
npm	@shennmine/libsignal-node	2.2.3
npm	@shennmine/libsignal-node	2.2.4
npm	@shennmine/libsignal-node	2.2.5
npm	@shennmine/libsignal-node	2.2.6
npm	@xyuxu/i18never	0.0.1-security
npm	@xyuxu/i18never	999.0.104
npm	@xyuxu/i18never	999.0.105
npm	@xyuxu/i18never	999.0.106
pypi	joyboyw	1.0.0
pypi	joyboyw	1.0.1
npm	metro-evaluator	0.0.1-security
npm	metro-evaluator	1.0.0
npm	metro-evaluator	1.0.1
npm	metro-evaluator	1.0.2
npm	metro-evaluator	1.0.3
npm	smm-youtube	0.0.1-security
npm	smm-youtube	1.0.0
npm	smm-youtube	1.0.1
npm	smm-youtube	1.0.2

Find vulnerabilities. Fix fast with AI.

sonatype-2025-007468

sonatype-2025-007468