Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000051

sonatype-2026-000051

Malicious Packages - Thu Jan 08 2026 [Credential Info Stealer/Env Vars]

Published Jan 8, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-151.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-164.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-165.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-166.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-380.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	@kyriba/data-frontend	0.0.1-security
npm	@kyriba/data-frontend	1.0.0
npm	@kyriba/data-frontend	1.0.1
npm	@kyriba/data-frontend	1.0.2
npm	@kyriba/data-frontend	1.0.3
npm	@kyriba/data-frontend	1.0.4
npm	@kyriba/mf-kit	0.0.1-security
npm	@kyriba/mf-kit	1.0.0
npm	@kyriba/mf-kit	1.0.1
npm	@kyriba/mf-kit	1.0.2
npm	@kyriba/mf-kit	1.0.3
npm	@kyriba/mf-kit	1.0.4
npm	@kyriba/platform-frontend	0.0.1-security
npm	@kyriba/platform-frontend	1.0.0
npm	@kyriba/platform-frontend	1.0.1
npm	@kyriba/platform-frontend	1.0.2
npm	@kyriba/ui-workspace	0.0.1-security
npm	@kyriba/ui-workspace	1.0.0
npm	@kyriba/ui-workspace	1.0.1
npm	@kyriba/ui-workspace	1.0.2
npm	not-remix	0.0.1
npm	not-remix	0.0.2
npm	not-remix	9.0.0
npm	svelte-monorepo	0.0.1-security
npm	svelte-monorepo	1.0.0

sonatype-2026-000051 | Components Impacted | Sonatype Guide | Sonatype Guide