Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2026-000281
sonatype-2026-000281
Malicious Packages - Mon Feb 02 2026 [RCE]
Published Feb 2, 2026
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-616.json
CVSS Score
High
8.7
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
c11dff444
0.0.1-security
npm
c11dff444
1.0.0
npm
c11dff444
1.0.10
npm
c11dff444
1.0.1
npm
c11dff444
1.0.2
npm
c11dff444
1.0.3
npm
c11dff444
1.0.4
npm
c11dff444
1.0.5
npm
c11dff444
1.0.6
npm
c11dff444
1.0.7
npm
c11dff444
1.0.8
npm
c11dff444
1.0.9
1-12 of 12
sonatype-2026-000281 | Components Impacted | Sonatype Guide | Sonatype Guide
