Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000229

sonatype-2026-000229

Malicious Packages - Mon Jan 26 2026 [Info Stealer/Host Data]

Published Jan 26, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-264.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-500.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-507.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-509.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-554.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-676.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-682.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@ikeacnalan/icons	0.0.1-security
npm	@ikeacnalan/icons	99.9.9
npm	@sommos/create-program-template-form-data	99.9.10
npm	@sommos/create-program-template-form-data	99.9.9
npm	@ux-foundry/palette	0.0.1-security
npm	@ux-foundry/palette	999.99.9
pypi	Flask-Hookserver	999.0.0
pypi	Flask-Hookserver	999.0.1
npm	ach-spa-facephi	99.9.1
npm	braintree-web-latest	0.0.1-security
npm	braintree-web-latest	1.0.0
npm	braintree-web-latest	99.99.1
npm	kwp-analytics	0.0.1-security
npm	kwp-analytics	99.99.9
npm	tcp-app-activation-react	99.9.1
npm	tripica-library	1.0.0
npm	tripica-library	999.1.0
npm	zabittest11	1.0.0
npm	zabittest11	1.0.1

sonatype-2026-000229 | Components Impacted | Sonatype Guide | Sonatype Guide