Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000019

sonatype-2026-000019

Malicious Packages - Tue Jan 06 2026 [Credential Info Stealer/Env Vars, Cookies]

Published Jan 6, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-388.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-389.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-394.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-397.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	charlie_charlie_kirky	0.0.1-security
npm	charlie_charlie_kirky	1.0.0
npm	charlie_charlie_kirky	1.6.7
npm	genki-analytics	0.0.1-security
npm	genki-analytics	1.0.0
npm	n8n-nodes-zl-vietts	0.0.1-security
npm	n8n-nodes-zl-vietts	1.0.10
npm	n8n-nodes-zl-vietts	1.0.11
npm	n8n-nodes-zl-vietts	1.0.12
npm	n8n-nodes-zl-vietts	1.0.13
npm	n8n-nodes-zl-vietts	1.0.14
npm	n8n-nodes-zl-vietts	1.0.15
npm	n8n-nodes-zl-vietts	1.0.16
npm	n8n-nodes-zl-vietts	1.0.17
npm	n8n-nodes-zl-vietts	1.0.18
npm	n8n-nodes-zl-vietts	1.0.19
npm	n8n-nodes-zl-vietts	1.0.1
npm	n8n-nodes-zl-vietts	1.0.20
npm	n8n-nodes-zl-vietts	1.0.21
npm	n8n-nodes-zl-vietts	1.0.22
npm	n8n-nodes-zl-vietts	1.0.23
npm	n8n-nodes-zl-vietts	1.0.24
npm	n8n-nodes-zl-vietts	1.0.25
npm	n8n-nodes-zl-vietts	1.0.26
npm	n8n-nodes-zl-vietts	1.0.27
npm	n8n-nodes-zl-vietts	1.0.28
npm	n8n-nodes-zl-vietts	1.0.29
npm	n8n-nodes-zl-vietts	1.0.2
npm	n8n-nodes-zl-vietts	1.0.30
npm	n8n-nodes-zl-vietts	1.0.31
npm	n8n-nodes-zl-vietts	1.0.32
npm	n8n-nodes-zl-vietts	1.0.33
npm	n8n-nodes-zl-vietts	1.0.34
npm	n8n-nodes-zl-vietts	1.0.35
npm	n8n-nodes-zl-vietts	1.0.37
npm	n8n-nodes-zl-vietts	1.0.38
npm	n8n-nodes-zl-vietts	1.0.39
npm	n8n-nodes-zl-vietts	1.0.3
npm	n8n-nodes-zl-vietts	1.0.40
npm	n8n-nodes-zl-vietts	1.0.4
npm	n8n-nodes-zl-vietts	1.0.5
npm	n8n-nodes-zl-vietts	1.0.6
npm	n8n-nodes-zl-vietts	1.0.7
npm	n8n-nodes-zl-vietts	1.0.8
npm	n8n-nodes-zl-vietts	1.0.9
npm	recaptcha-cors	0.0.1-security
npm	recaptcha-cors	1.0.1
npm	recaptcha-cors	1.0.2
npm	recaptcha-cors	1.0.3
npm	recaptcha-cors	1.0.5

sonatype-2026-000019 | Components Impacted | Sonatype Guide | Sonatype Guide