Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007472

sonatype-2025-007472

Malicious Packages - Mon Dec 08 2025 [Info Stealer]

Published Dec 8, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	ctfepakageflgs	0.0.1-security
npm	ctfepakageflgs	0.30.3
npm	ctfepakageflgs	0.30.4
npm	ctfepakageflgs	1.30.5
npm	flagstealerfinal	0.0.1-security
npm	flagstealerfinal	1.0.0
npm	flagstealerfinal	1.0.1
npm	my-ctf-package	0.0.1-security
npm	my-ctf-package	0.30.3
npm	parashaxmgflhg	0.0.1-security
npm	parashaxmgflhg	0.30.3
npm	parashaxmgflhg	0.30.5
npm	parashaxmgflhg	0.30.6
npm	parashaxmgflhg	0.33.4
npm	stnsxmp	0.0.1
npm	stnsxmp	0.30.1
npm	stnsxmp	0.30.2
npm	stnsxmp2	0.30.1
npm	stnsxmp3	0.30.1
npm	stnsxmp4	0.30.1
npm	stnsxmp4	0.30.2
npm	stnsxmp5	0.30.1

sonatype-2025-007472 | Components Impacted | Sonatype Guide | Sonatype Guide