Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000095

sonatype-2026-000095

Malicious Packages - Fri Jan 09 2026 [Info Stealer/Host Data] [author: p3nt3st]

Published Jan 9, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-197.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-267.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-268.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-277.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-279.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-281.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-285.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-287.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-288.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-289.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-291.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-301.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-314.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-317.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	alf-ui-js	0.0.1-security
npm	alf-ui-js	99.99.1
npm	alf-ui-js	99.99.2
npm	assurance-common-components	0.0.1-security
npm	assurance-common-components	99.99.1
npm	assurance-common-components	99.99.2
npm	cognito-auth-plugin	0.0.1-security
npm	cognito-auth-plugin	99.99.1
npm	cognito-auth-plugin	99.99.2
npm	dibels8-content	0.0.1-security
npm	dibels8-content	99.99.1
npm	eniram-web-common-ui	0.0.1-security
npm	eniram-web-common-ui	99.99.1
npm	focus-trap-v2	0.0.1-security
npm	focus-trap-v2	99.99.1
npm	idel2-content	0.0.1-security
npm	idel2-content	99.99.1
npm	insightvm-ui-nav-menus	0.0.1-security
npm	insightvm-ui-nav-menus	99.99.1
npm	js-observability	0.0.1-security
npm	js-observability	99.99.1
npm	lead-ion	0.0.1-security
npm	lead-ion	99.99.1
npm	react-sitecore-library	0.0.1-security
npm	react-sitecore-library	99.99.1
npm	resto_ui_components	0.0.1-security
npm	resto_ui_components	99.99.1
npm	resto_ui_components	99.99.2
npm	styled-system-old	0.0.1-security
npm	styled-system-old	99.99.1
npm	textual-sorter-lib	0.0.1-security
npm	textual-sorter-lib	99.99.1

sonatype-2026-000095 | Components Impacted | Sonatype Guide | Sonatype Guide