Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007616

sonatype-2025-007616

Malicious Packages - Mon Dec 22 2025 [Credential Info Stealer] [Data Corruption]

Published Dec 22, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-46.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	github-badge-bot	0.0.1-security
npm	github-badge-bot	1.0.0
npm	github-badge-bot	1.0.1
npm	github-badge-bot	1.0.2
npm	github-badge-bot	1.0.3
npm	github-badge-bot	1.0.4
npm	github-badge-bot	1.0.5
npm	github-badge-bot	1.0.6
npm	github-badge-bot	1.0.7
npm	github-badge-bot	1.0.8
npm	github-badge-bot	1.0.9
npm	github-badge-bot	1.1.0
npm	github-badge-bot	1.1.1
npm	github-badge-bot	1.1.2
npm	github-badge-bot	1.1.3
npm	github-badge-bot	1.1.4
npm	github-badge-bot	1.1.5
npm	github-badge-bot	1.10.0
npm	github-badge-bot	1.10.1
npm	github-badge-bot	1.10.2
npm	github-badge-bot	1.10.3
npm	github-badge-bot	1.10.4
npm	github-badge-bot	1.11.0
npm	github-badge-bot	1.11.1
npm	github-badge-bot	1.11.2
npm	github-badge-bot	1.11.3
npm	github-badge-bot	1.11.4
npm	github-badge-bot	1.11.5
npm	github-badge-bot	1.11.6
npm	github-badge-bot	1.11.7
npm	github-badge-bot	1.12.0
npm	github-badge-bot	1.12.1
npm	github-badge-bot	1.12.2
npm	github-badge-bot	1.12.3
npm	github-badge-bot	1.12.4
npm	github-badge-bot	1.12.5
npm	github-badge-bot	1.13.0
npm	github-badge-bot	1.13.1
npm	github-badge-bot	1.14.0
npm	github-badge-bot	1.14.1
npm	github-badge-bot	1.15.0
npm	github-badge-bot	1.15.1
npm	github-badge-bot	1.2.0
npm	github-badge-bot	1.2.1
npm	github-badge-bot	1.2.2
npm	github-badge-bot	1.2.3
npm	github-badge-bot	1.2.4
npm	github-badge-bot	1.2.5
npm	github-badge-bot	1.2.6
npm	github-badge-bot	1.2.7

sonatype-2025-007616 | Components Impacted | Sonatype Guide | Sonatype Guide