Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007705

sonatype-2025-007705

Malicious Packages - Tue Dec 30 2025 [Credential Info Stealer]

Published Dec 31, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	ing-feat-malware-detection	0.0.1-security
npm	ing-feat-malware-detection	99.99.99
npm	ing-feat-ui-image	0.0.1-security
npm	ing-feat-ui-image	99.99.99
npm	intl-tel-input-utils	0.0.1-security
npm	intl-tel-input-utils	99.99.100
npm	intl-tel-input-utils	99.99.99
npm	orchestration-node-common-errors	0.0.1-security
npm	orchestration-node-common-errors	99.99.99
npm	tickncook-robot	0.0.1-security
npm	tickncook-robot	99.99.99
npm	ugc-kit	0.0.1-security
npm	ugc-kit	99.99.99

sonatype-2025-007705 | Components Impacted | Sonatype Guide | Sonatype Guide