Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007703

sonatype-2025-007703

Malicious Packages - Wed Dec 31 2025 [RCE] [Backdoor]

Published Dec 31, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-346.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	zod-js	0.0.1-security
npm	zod-js	4.3.2
npm	zodjs	4.3.2
npm	zodjs	4.3.3
npm	zodjs	4.3.4

sonatype-2025-007703 | Components Impacted | Sonatype Guide | Sonatype Guide