Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007492

sonatype-2025-007492

Malicious Packages - Tue Dec 09 2025 [Info Stealer]

Published Dec 9, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192395.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192427.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192463.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	ctfparsertna	0.0.1-security
npm	ctfparsertna	0.30.1
npm	ctfparsertna	0.30.2
npm	ctfparsertna	0.30.4
npm	ctfparsertna	0.30.5
npm	ctfvamp	0.0.1-security
npm	ctfvamp	0.30.10
npm	ctfvamp	0.30.11
npm	ctfvamp	0.30.12
npm	ctfvamp	0.30.13
npm	ctfvamp	0.30.14
npm	ctfvamp	0.30.15
npm	ctfvamp	0.30.6
npm	ctfvamp	0.30.7
npm	ctfvampir	0.0.1-security
npm	ctfvampir	0.30.70
npm	ctfxmlflgcheck	0.0.1-security
npm	ctfxmlflgcheck	0.30.1
npm	libxmljs2qwerty	0.30.67
npm	libxmljs2qwerty	0.80.1
npm	libxmljs8	0.30.1
npm	libxmljs9	0.30.1
npm	libxmljsololo	0.30.2
npm	libxmljsololoq	0.30.4
npm	libxmlrussia	0.30.2
npm	libxmlrussia2	0.30.2
npm	libxmlussr	0.30.2
npm	libxmlussr1	0.30.2
npm	parashaxmgflhg	0.30.6

sonatype-2025-007492 | Components Impacted | Sonatype Guide | Sonatype Guide