Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007575

sonatype-2025-007575

Malicious Packages - Mon Dec 15 2025 [Info Stealer]

Published Dec 16, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192693.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192698.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	airslate-dep-webpack	1.5.0
npm	airslate-dep-webpack	1.5.1
npm	airslate-dep-webpack	1.5.2
npm	npm-xmt	0.0.1-security
npm	npm-xmt	1.0.0
npm	npm-xmt	1.0.1
npm	ro-mobile	0.0.1-security
npm	ro-mobile	999.0.0
npm	ro-mobile	999.0.1

sonatype-2025-007575 | Components Impacted | Sonatype Guide | Sonatype Guide