Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000161

sonatype-2026-000161

admin10001 - Fri Jan 16 2026 [Credential Info Stealer]

Published Jan 16, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-322.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	admin10001	0.0.1-security
npm	admin10001	1.0.0
npm	admin10001	1.0.100
npm	admin10001	1.0.101
npm	admin10001	1.0.102
npm	admin10001	1.0.103
npm	admin10001	1.0.104
npm	admin10001	1.0.105
npm	admin10001	1.0.106
npm	admin10001	1.0.107
npm	admin10001	1.0.108
npm	admin10001	1.0.109
npm	admin10001	1.0.10
npm	admin10001	1.0.111
npm	admin10001	1.0.112
npm	admin10001	1.0.113
npm	admin10001	1.0.114
npm	admin10001	1.0.115
npm	admin10001	1.0.116
npm	admin10001	1.0.117
npm	admin10001	1.0.118
npm	admin10001	1.0.119
npm	admin10001	1.0.11
npm	admin10001	1.0.120
npm	admin10001	1.0.121
npm	admin10001	1.0.122
npm	admin10001	1.0.123
npm	admin10001	1.0.124
npm	admin10001	1.0.125
npm	admin10001	1.0.126
npm	admin10001	1.0.127
npm	admin10001	1.0.128
npm	admin10001	1.0.129
npm	admin10001	1.0.12
npm	admin10001	1.0.130
npm	admin10001	1.0.131
npm	admin10001	1.0.132
npm	admin10001	1.0.133
npm	admin10001	1.0.134
npm	admin10001	1.0.135
npm	admin10001	1.0.136
npm	admin10001	1.0.137
npm	admin10001	1.0.138
npm	admin10001	1.0.139
npm	admin10001	1.0.13
npm	admin10001	1.0.140
npm	admin10001	1.0.141
npm	admin10001	1.0.142
npm	admin10001	1.0.143
npm	admin10001	1.0.144

sonatype-2026-000161 | Components Impacted | Sonatype Guide | Sonatype Guide