Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000118

sonatype-2026-000118

admin1001 - Tue Jan 13 2026 [Info Stealer] [Credential Info Stealer]

Published Jan 13, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-246.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	admin1001	0.0.1-security
npm	admin1001	1.0.0
npm	admin1001	2.0.0
npm	admin1001	3.0.0
npm	admin1001	3.0.1
npm	admin1001	3.0.2
npm	admin1001	3.0.3
npm	admin1001	3.0.4
npm	admin1001	3.0.5
npm	admin1001	3.0.6
npm	admin1001	3.0.7
npm	admin1001	3.0.8
npm	admin1001	4.0.0
npm	admin1001	4.0.1
npm	admin1001	4.0.2
npm	admin1001	4.0.3
npm	admin1001	4.0.4
npm	admin1001	4.0.5
npm	admin1001	4.0.6
npm	admin1001	4.0.7
npm	admin1001	4.0.8
npm	admin1001	4.0.9
npm	admin1001	4.1.0
npm	admin1001	4.1.1
npm	admin1001	4.1.2
npm	admin1001	4.1.3
npm	admin1001	4.1.4
npm	admin1001	4.1.5
npm	admin1001	4.1.7
npm	admin1001	4.1.8
npm	admin1001	4.1.9
npm	admin1001	4.2.0
npm	admin1001	4.2.1
npm	admin1001	4.2.2
npm	admin1001	4.2.3
npm	admin1001	4.2.4
npm	admin1001	4.2.5
npm	admin1001	4.2.6
npm	admin1001	4.2.7
npm	admin1001	4.3.0
npm	admin1001	4.3.100
npm	admin1001	4.3.101
npm	admin1001	4.3.102
npm	admin1001	4.3.103
npm	admin1001	4.3.104
npm	admin1001	4.3.105
npm	admin1001	4.3.106
npm	admin1001	4.3.107
npm	admin1001	4.3.108
npm	admin1001	4.3.109

sonatype-2026-000118 | Components Impacted | Sonatype Guide | Sonatype Guide