Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007525

sonatype-2025-007525

Malicious Packages - Tue Dec 09 2025 [Info Stealer]

Published Dec 11, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192541.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192542.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192543.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192696.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192697.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@vienna_cancer_center_portal/js	0.0.1-security
npm	@vienna_cancer_center_portal/js	1.0.0
npm	@vienna_cancer_center_portal/js	99.99.1
npm	mui-wrapper-core	0.0.1-security
npm	mui-wrapper-core	1.0.0
npm	mui-wrapper-core	99.99.1
npm	mui-wrapper-icons	0.0.1-security
npm	mui-wrapper-icons	1.0.0
npm	mui-wrapper-icons	99.99.1
npm	mui-wrapper-styles	0.0.1-security
npm	mui-wrapper-styles	1.0.0
npm	mui-wrapper-styles	99.99.1
npm	mw-frontend-utils	0.0.1-security
npm	mw-frontend-utils	1.0.0
npm	mw-frontend-utils	99.99.1
npm	mw-proto-ts	0.0.1-security
npm	mw-proto-ts	1.0.0
npm	mw-proto-ts	99.99.1

sonatype-2025-007525 | Components Impacted | Sonatype Guide | Sonatype Guide