Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000188

sonatype-2026-000188

Malicious Packages - Tue Jan 20 2026 [Info Stealer/Host Data]

Published Jan 20, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-451.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-452.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-455.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-456.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-458.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-477.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-478.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-479.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-483.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-570.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-571.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@alluxio/common-ui	0.0.1-security
npm	@alluxio/common-ui	1.0.1768732882
npm	@alluxio/common-ui	5.0.2
npm	@alluxio/common-ui	5.0.3
npm	@brl-laiwb/ng-laiwb-api	0.0.1-security
npm	@brl-laiwb/ng-laiwb-api	1.0.1768732829
npm	@brl-laiwb/ng-laiwb-api	5.0.1
npm	@brl-laiwb/ng-laiwb-api	5.0.2
npm	@mailpoet/components	0.0.1-security
npm	@mailpoet/components	1.0.1768733149
npm	@mailpoet/components	5.0.2
npm	@mailpoet/eslint-config	0.0.1-security
npm	@mailpoet/eslint-config	1.0.1768733081
npm	@mailpoet/eslint-config	5.0.2
npm	@panopto/api-core	1.0.0
npm	@panopto/api-core	99.98.5
npm	@panopto/api-core	99.98.6
npm	@spot-dapp/web	99.99.99
npm	@spot-dapp/web	99.99.9
npm	brisk-web-ssr	1.0.0
npm	brisk-web-ssr	99.99.1
npm	brisk-web-ssr	99.99.2
npm	bttr-devs	0.0.1-security
npm	bttr-devs	10.10.10
npm	bttr-devs	10.10.11
npm	bttr-devs	13.13.13
npm	bttr-devs	13.13.14
npm	csv-parsing-xx	1.2.1
npm	csv-parsing-xyz	1.0.0
npm	csv-parsing-xz	0.0.1-security
npm	csv-parsing-xz	1.2.1
npm	domino-elements	99.9.8
npm	domino-elements	99.9.9
npm	integromat-ui	99.9.9
npm	latitude-service-centre	1.0.0
npm	latitude-service-centre	99.99.2
npm	latitude-service-centre	99.99.5
npm	lyatly-utils	0.0.1-security
npm	lyatly-utils	99.0.0
npm	lyatly-utils	99.0.2
npm	lyatly-utils	99.0.3
npm	monash-user-admin-ui	1.0.0
npm	monash-user-admin-ui	99.99.1
npm	monash-user-admin-ui	99.99.4
npm	no6gg	1.0.0
npm	no6gg	1.0.10
npm	no6gg	1.0.1
npm	no6gg	1.0.2
npm	no6gg	1.0.3
npm	no6gg	1.0.4

sonatype-2026-000188 | Components Impacted | Sonatype Guide | Sonatype Guide