Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000153

sonatype-2026-000153

Malicious Packages - Thu Jan 15 2026 [Credential Info Stealer] [n8n packages]

Published Jan 15, 2026

https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-538.json https://thehackernews.com/2026/01/n8n-supply-chain-attack-abuses.html

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	n8n-nodes-danev	1.2.9
npm	n8n-nodes-danev	1.3.0
npm	n8n-nodes-danev	1.3.1
npm	n8n-nodes-danev	1.3.2
npm	n8n-nodes-danev	1.3.3
npm	n8n-nodes-danev	1.4.0
npm	n8n-nodes-danev	1.4.1
npm	n8n-nodes-danev	1.4.2
npm	n8n-nodes-danev	1.4.3
npm	n8n-nodes-danev	1.5.0
npm	n8n-nodes-danev	1.5.1
npm	n8n-nodes-danev	1.5.2
npm	n8n-nodes-danev	1.6.0
npm	n8n-nodes-danev	1.6.1
npm	n8n-nodes-danev	1.6.2
npm	n8n-nodes-danev	1.6.3
npm	n8n-nodes-danev	1.6.5
npm	n8n-nodes-danev	1.6.6
npm	n8n-nodes-danev	1.6.8
npm	n8n-nodes-danev	1.6.9
npm	n8n-nodes-danev	2.0.0
npm	n8n-nodes-danev	2.0.2
npm	n8n-nodes-danev	2.0.3
npm	n8n-nodes-danev	2.0.4
npm	n8n-nodes-danev	2.0.6
npm	n8n-nodes-danev	2.0.7
npm	n8n-nodes-danev	2.1.0
npm	n8n-nodes-danev	3.0.0
npm	n8n-nodes-danev	3.0.1
npm	n8n-nodes-danev	3.1.0
npm	n8n-nodes-danev	3.1.1
npm	n8n-nodes-danev	3.1.2
npm	n8n-nodes-danev	3.1.3
npm	n8n-nodes-danev	3.2.0
npm	n8n-nodes-danev	3.2.1
npm	n8n-nodes-danev	3.3.0
npm	n8n-nodes-danev	3.4.0
npm	n8n-nodes-danev	3.4.1
npm	n8n-nodes-danev	3.4.2
npm	n8n-nodes-danev	3.5.0
npm	n8n-nodes-danev	3.5.10
npm	n8n-nodes-danev	3.5.11
npm	n8n-nodes-danev	3.5.12
npm	n8n-nodes-danev	3.5.13
npm	n8n-nodes-danev	3.5.14
npm	n8n-nodes-danev	3.5.15
npm	n8n-nodes-danev	3.5.16
npm	n8n-nodes-danev	3.5.17
npm	n8n-nodes-danev	3.5.18
npm	n8n-nodes-danev	3.5.19

sonatype-2026-000153 | Components Impacted | Sonatype Guide | Sonatype Guide