Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007669

sonatype-2025-007669

Malicious Packages - Mon Dec 29 2025 [Info Stealer]

Published Dec 29, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-183.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-184.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-185.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-186.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-187.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	faceplate-ui	9.9.9
npm	shreddit.styles	9.9.9
npm	yunxohang10	1.0.0
npm	yunxohang11	0.0.1-security
npm	yunxohang11	1.0.0
npm	yunxohang4	0.0.1-security
npm	yunxohang4	9.9.9
npm	yunxohang5	0.0.1-security
npm	yunxohang5	9.9.9
npm	yunxohang6	0.0.1-security
npm	yunxohang6	9.9.9
npm	yunxohang7	0.0.1-security
npm	yunxohang7	9.9.9

sonatype-2025-007669 | Components Impacted | Sonatype Guide | Sonatype Guide