Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000279

sonatype-2026-000279

Malicious Packages - Mon Feb 02 2026 [Info Stealer]

Published Feb 2, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-615.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-617.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-637.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-740.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@msecscc/gaia	0.0.1-security
npm	@msecscc/gaia	9.9.9
npm	@msecscc/gaia	99.9.9
npm	circuit-playground	66.55.16
npm	circuit-playground	66.55.17
npm	circuit-playground	999.55.17
npm	launchdarkly-cpp-networking	0.0.1-security
npm	launchdarkly-cpp-networking	0.2.0
npm	launchdarkly-cpp-networking	1.0.0
npm	launchdarkly-cpp-networking	1.2.0
npm	roots-cms-client	0.0.1-security
npm	roots-cms-client	0.0.9999
npm	roots-cms-client	0.0.999
npm	roots-cms-client	0.0.99
npm	roots-cms-client	0.1.99
npm	teaser-nav	19.9.5

sonatype-2026-000279 | Components Impacted | Sonatype Guide | Sonatype Guide