Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000079

sonatype-2026-000079

Malicious Packages - Fri Jan 09 2026 [Info Stealer/Host Data]

Published Jan 9, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-212.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-406.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-414.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-431.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	aws-crt-nodejs	0.0.1-security
npm	aws-crt-nodejs	0.0.1
npm	aws-crt-nodejs	200.0.1
npm	aws-crt-nodejs	97.34.16
npm	debox-rn	0.0.1-security
npm	debox-rn	93.32.40
npm	debox-rn	93.32.41
npm	feature-sca	77.7.7
npm	lyonscg	0.0.1-security
npm	lyonscg	88.8.8
npm	octopus.public.web	88.8.8
npm	recoilusagelogfalcoevent	77.7.7
npm	test-bugbounty-package-4321	99.99.99
npm	test-bugbounty-package-6	99.99.99
npm	test-bugbounty-package-9	99.99.99
npm	testpkg-yilider690	0.0.1-security
npm	testpkg-yilider690	95.80.7

sonatype-2026-000079 | Components Impacted | Sonatype Guide | Sonatype Guide