Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007625

sonatype-2025-007625

Malicious Packages - Mon Dec 22 2025 [Credential Info Stealer] [Data Corruption]

Published Dec 22, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-47.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	github-badge-bot	1.10.0
npm	github-badge-bot	1.10.1
npm	github-badge-bot	1.10.2
npm	github-badge-bot	1.10.3
npm	github-badge-bot	1.10.4
npm	github-badge-bot	1.11.0
npm	github-badge-bot	1.11.1
npm	github-badge-bot	1.11.2
npm	github-badge-bot	1.11.3
npm	github-badge-bot	1.11.4
npm	github-badge-bot	1.11.5
npm	github-badge-bot	1.11.6
npm	github-badge-bot	1.11.7
npm	github-badge-bot	1.12.0
npm	github-badge-bot	1.12.1
npm	github-badge-bot	1.12.2
npm	github-badge-bot	1.12.3
npm	github-badge-bot	1.12.4
npm	github-badge-bot	1.12.5
npm	github-badge-bot	1.13.0
npm	github-badge-bot	1.13.1
npm	github-badge-bot	1.14.0
npm	github-badge-bot	1.14.1
npm	github-badge-bot	1.15.0
npm	github-badge-bot	1.15.1
npm	github-badge-bot	1.8.8
npm	github-badge-bot	1.8.9
npm	github-badge-bot	1.9.0
npm	github-badge-bot	1.9.1
npm	github-badge-bot	1.9.2
npm	github-badge-bot	1.9.3
npm	github-badge-bot	1.9.4
npm	github-badge-bot	1.9.5
npm	tiny-model-update	0.0.1-security
npm	tiny-model-update	1.15.1
npm	tiny-model-update	1.16.0
npm	tiny-model-update	1.16.1
npm	tiny-model-update	1.16.2
npm	tiny-model-update	1.16.3
npm	tiny-model-update	1.16.4
npm	tiny-model-update	1.16.5
npm	tiny-model-update	1.16.6
npm	tiny-model-update	1.16.7
npm	tiny-model-update	1.16.8
npm	tiny-model-update	1.17.0
npm	tiny-model-update	1.17.1
npm	tiny-model-update	1.17.2
npm	tiny-model-update	1.17.3
npm	tiny-model-update	1.17.4
npm	tiny-model-update	1.17.5

sonatype-2025-007625 | Components Impacted | Sonatype Guide | Sonatype Guide