Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007681

sonatype-2025-007681

Malicious Packages - Tue Dec 30 2025 [RCE] [Reverse Shell]

Published Dec 30, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-59.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	hello-world-npm-demo-example	0.0.1-security
npm	hello-world-npm-demo-example	1.0.0
npm	hello-world-npm-demo-example	1.0.1
npm	hello-world-npm-demo-example	1.0.2
npm	hello-world-npm-demo-example	1.0.3
npm	hello-world-npm-demo-example	1.0.4
npm	hello-world-npm-demo-example	1.0.5

sonatype-2025-007681 | Components Impacted | Sonatype Guide | Sonatype Guide