Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007534

sonatype-2025-007534

Malicious Packages - Thu Dec 11 2025 [RCE]

Published Dec 11, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192434.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	@cheqplease/structured-logger	0.0.1-security
npm	@cheqplease/structured-logger	2.1.15
npm	@cheqplease/structured-logger	2.2.10
npm	@cheqplease/structured-logger	2.2.11
npm	@cheqplease/structured-logger	2.2.13
npm	@cheqplease/structured-logger	2.2.15
npm	@cheqplease/structured-logger	2.2.2
npm	@cheqplease/structured-logger	2.2.3
npm	@cheqplease/structured-logger	2.2.5
npm	@cheqplease/structured-logger	2.2.7
npm	@cheqplease/structured-logger	2.2.9
npm	@cheqplease/structured-logger	9.1.15
npm	@cheqplease/structured-logger	9.3.0
npm	@cheqplease/structured-logger	9.3.2
npm	dise-pkt	1.0.2
npm	flip-prx	1.0.2
npm	mayhem-wma	1.0.1
npm	mcp-polymarket	0.5.2
npm	mcp-polymarket	0.5.3
npm	portal-aes	1.3.3
npm	portal-lim	1.3.4
npm	portal-lime	2.1.3
npm	portal-lise	2.1.4
npm	xrpl-api	3.7.21

sonatype-2025-007534 | Components Impacted | Sonatype Guide | Sonatype Guide