Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000276

sonatype-2026-000276

Malicious Packages - Mon Feb 02 2026 [Dropper] [Secrets Exfil]

Published Feb 2, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	react-fast-utilsa	2.0.1
npm	react-fast-utilsa	2.0.2
npm	react-fast-utilsa	2.0.3
npm	react-fast-utilsa	2.0.4
npm	react-query-core-utils	4.4.1
npm	react-query-core-utils	4.4.2
npm	react-query-core-utils	4.4.3
npm	react-query-core-utils	4.4.4
npm	react-query-core-utils	4.4.5
npm	react-query-core-utils	4.4.6
npm	react-query-core-utils	4.4.7
npm	react-query-core-utils	4.4.8
npm	react-query-core-utils	4.4.9
npm	react-query-core-utils	4.5.1
npm	react-query-core-utils	4.5.2
npm	react-query-core-utils	4.5.3
npm	react-state-optimizer-core	1.0.0
npm	react-state-optimizer-core	1.0.2
npm	react-state-optimizer-core	1.0.3
npm	react-state-optimizer-core	1.0.4
npm	react-state-optimizer-core	1.0.5
npm	react-state-optimizer-core	1.0.6
npm	react-state-optimizer-core	1.0.7
npm	react-state-optimizer-core	1.0.8
npm	react-state-optimizer-core	1.0.9
npm	react-state-optimizer-core	3.0.3
npm	react-state-optimizer-core	3.0.4
npm	react-state-optimizer-core	3.0.5
npm	react-state-optimizer-core	3.0.6
npm	react-state-optimizer-core	3.0.7
npm	react-state-optimizer-core	3.0.8
npm	react-state-optimizer-core	3.0.9

sonatype-2026-000276 | Components Impacted | Sonatype Guide | Sonatype Guide