Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-007485
sonatype-2025-007485
Malicious Packages - Tue Dec 09 2025 [Info Stealer]
Published Dec 9, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2025-192379.json
https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2025-192382.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192388.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192389.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192390.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192425.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192452.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192453.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192455.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192457.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192458.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-835.json
CVSS Score
Medium
5.3
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
@sodexo-connect/sap-cdc-client
0.0.1-security
npm
@sodexo-connect/sap-cdc-client
0.9897.9869
npm
@sodexo-connect/sap-cdc-client
1.9897.9869
npm
@sodexo-connect/sap-cdc-client
10.9897.9869
npm
@sodexo-connect/sap-cdc-client
11.9897.9869
npm
@sodexo-connect/sap-cdc-client
12.9897.9869
npm
@sodexo-connect/sap-cdc-client
13.9897.9869
npm
@sodexo-connect/sap-cdc-client
14.9897.9869
npm
@sodexo-connect/sap-cdc-client
15.9897.9869
npm
@sodexo-connect/sap-cdc-client
16.9897.9869
npm
@sodexo-connect/sap-cdc-client
17.9897.9869
npm
@sodexo-connect/sap-cdc-client
18.9897.9869
npm
@sodexo-connect/sap-cdc-client
19.9897.9869
npm
@sodexo-connect/sap-cdc-client
2.9897.9869
npm
@sodexo-connect/sap-cdc-client
20.9897.9869
npm
@sodexo-connect/sap-cdc-client
21.9897.9869
npm
@sodexo-connect/sap-cdc-client
22.9897.9869
npm
@sodexo-connect/sap-cdc-client
23.9897.9869
npm
@sodexo-connect/sap-cdc-client
24.9897.9869
npm
@sodexo-connect/sap-cdc-client
25.9897.9869
npm
@sodexo-connect/sap-cdc-client
3.9897.9869
npm
@sodexo-connect/sap-cdc-client
4.9897.9869
npm
@sodexo-connect/sap-cdc-client
5.9897.9869
npm
@sodexo-connect/sap-cdc-client
6.9897.9869
npm
@sodexo-connect/sap-cdc-client
7.9897.9869
npm
@sodexo-connect/sap-cdc-client
8.9897.9869
npm
@sodexo-connect/sap-cdc-client
9.9897.9869
npm
azaza
0.0.1-security
npm
azaza
1.0.0
npm
ctfvamp
0.30.11
npm
ctfvamp
0.30.12
pypi
ctosec.appsec-wb-xray-adapter
0.1.1
pypi
ctosec.appsec-wb-xray-adapter
0.2.0
pypi
helloharry123p
0.1.0
pypi
helloharry123p
0.1.1
npm
libxmlaboba
0.30.2
npm
libxmlfinal2
0.30.3
npm
libxmlfinal3
0.30.3
npm
libxmlfinal4
0.30.3
npm
libxmlhere
0.30.3
npm
libxmljs2-1
0.30.2
npm
libxmljs2-custom
999.0.0
npm
libxmljs2-malicious
0.19.9
npm
libxmljs2147
0.30.2
npm
libxmljs2147147
0.30.2
npm
libxmljs21471479
0.30.2
npm
libxmljs2as
1.0.0
npm
libxmljs2qwerty
0.30.10
npm
libxmljs2qwerty
0.30.11
npm
libxmljs2qwerty
0.30.12
1-50 of 133
sonatype-2025-007485 | Components Impacted | Sonatype Guide | Sonatype Guide