Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007641

sonatype-2025-007641

Malicious Packages - Wed Dec 24 2025 [Credential Info Stealer]

Published Dec 24, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-170.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	@yesdgq/claude-buddy	0.0.1
npm	@yesdgq/claude-buddy	0.0.3
npm	@yesdgq/claude-buddy	1.0.0
npm	@yesdgq/claude-buddy	1.0.1
npm	@yesdgq/claude-buddy	1.0.2
npm	@yesdgq/claude-buddy	1.0.3
npm	@yesdgq/claude-buddy	1.0.4
npm	@yesdgq/claude-buddy	1.0.5
npm	@yesdgq/claude-buddy	1.0.6
npm	@yesdgq/claude-buddy	1.0.7
npm	@yesdgq/claude-buddy	1.0.8
npm	@yesdgq/claude-buddy	1.0.9
npm	@yesdgq/claude-buddy	1.1.0
npm	@yesdgq/claude-buddy	1.1.1000
npm	@yesdgq/claude-buddy	1.1.1002
npm	@yesdgq/claude-buddy	1.1.1003
npm	@yesdgq/claude-buddy	1.1.1004
npm	@yesdgq/claude-buddy	1.1.1005
npm	@yesdgq/claude-buddy	1.1.1006
npm	@yesdgq/claude-buddy	1.1.1007
npm	@yesdgq/claude-buddy	1.1.1008
npm	@yesdgq/claude-buddy	1.1.1009
npm	@yesdgq/claude-buddy	1.1.1010
npm	@yesdgq/claude-buddy	1.1.1011
npm	@yesdgq/claude-buddy	1.1.1012
npm	@yesdgq/claude-buddy	1.1.10
npm	@yesdgq/claude-buddy	1.1.11
npm	@yesdgq/claude-buddy	1.1.12
npm	@yesdgq/claude-buddy	1.1.13
npm	@yesdgq/claude-buddy	1.1.14
npm	@yesdgq/claude-buddy	1.1.15
npm	@yesdgq/claude-buddy	1.1.16
npm	@yesdgq/claude-buddy	1.1.17
npm	@yesdgq/claude-buddy	1.1.18
npm	@yesdgq/claude-buddy	1.1.19
npm	@yesdgq/claude-buddy	1.1.1
npm	@yesdgq/claude-buddy	1.1.2
npm	@yesdgq/claude-buddy	1.1.3
npm	@yesdgq/claude-buddy	1.1.4
npm	@yesdgq/claude-buddy	1.1.5
npm	@yesdgq/claude-buddy	1.1.6
npm	secguest-react-lib	0.0.1-security
npm	secguest-react-lib	1.0.0
npm	secguest-react-lib	1.0.1

sonatype-2025-007641 | Components Impacted | Sonatype Guide | Sonatype Guide