Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007535

sonatype-2025-007535

Malicious Packages - Thu Dec 11 2025 [Dropper]

Published Dec 11, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	chai-as-sorted	2.3.10
npm	chai-as-sorted	2.3.11
npm	chai-as-sorted	2.3.8
npm	chai-as-tested	2.3.8
npm	chai-async-chain	2.4.1
npm	chai-async-chains	0.0.1-security
npm	chai-async-chains	2.4.2
npm	chai-await-chain	2.4.2
npm	chai-await-chain	2.4.3
npm	chai-await-test	2.4.1
npm	chai-chain-async	2.4.3
npm	chai-chains-async	2.4.3
npm	chai-dex	2.4.2
npm	chai-max	0.0.1-security
npm	chai-max	2.4.2
npm	chai-max	2.4.3
npm	chai-min	2.4.2
npm	chai-promise-chain	2.4.1
npm	chai-promised-chain	2.4.2
npm	chai-promised-chains	2.4.2
npm	chai-promised-expect	2.4.1
npm	chai-proxify	2.4.2
npm	chai-proxy	2.4.2
npm	chai-proxy	2.4.3
npm	chai-px	2.4.2
npm	chai-status	2.4.2
npm	charswap	7.2.7
npm	cross-sessions	2.4.1
npm	dotjsenv	0.0.1-security
npm	dotjsenv	1.1.7
npm	dotnetenv	1.1.7
npm	error-fallback	2.4.2
npm	fileupload-core	2.4.3
npm	fileupload-util	2.4.3
npm	fileuploadcore	2.4.3
npm	initial-path	2.3.8
npm	initial-path21	3.3.9
npm	initial-path32	3.3.9
npm	js-coauth	7.2.7
npm	js-copack	1.1.7
npm	js-copack	1.1.8
npm	js-copack	7.2.7
npm	js-cotype	4.1.4
npm	js-multer	5.1.7
npm	js-nodecat	1.0.7
npm	js-repack	5.1.0
npm	js-unpack	1.1.7
npm	js-unpack	1.1.8
npm	js-uponcaps	7.2.7
npm	json-getin	7.2.7

sonatype-2025-007535 | Components Impacted | Sonatype Guide | Sonatype Guide