Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007579

sonatype-2025-007579

Malicious Packages - Mon Dec 15 2025 [Dropper]

Published Dec 16, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	bigmathex	0.0.1-security
npm	bigmathex	1.0.1
npm	bigmathex	1.0.2
npm	bigmathix	1.0.2
npm	bigmathix	1.0.3
npm	bigmathix	1.0.4
npm	bigmathix	1.0.5
npm	bigmathix	1.0.6
npm	bigmathlib	1.0.0
npm	bigmathlib	1.0.2
npm	bignumberx	1.0.0
npm	bignumex	1.0.0
npm	bignumx	1.0.0
npm	yellowdiscordlookup	0.0.1-security
npm	yellowdiscordlookup	2.0.0
npm	yellowdiscordlookup	2.0.1
npm	yellowdiscordlookup	2.0.2
npm	yellowdiscordlookup	2.0.3
npm	yellowdiscordlookup	2.0.4
npm	yellowdiscordlookup	2.0.6

sonatype-2025-007579 | Components Impacted | Sonatype Guide | Sonatype Guide