Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000282

sonatype-2026-000282

Malicious Packages - Mon Feb 02 2026 [Dropper]

Published Feb 2, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-716.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-752.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-753.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	locate-path_updated	0.0.1-security
npm	locate-path_updated	8.0.0
npm	log-symbols_updated	0.0.1-security
npm	log-symbols_updated	7.0.1
npm	si-wsl	0.0.1-security
npm	si-wsl	3.1.0
npm	si-wsl	3.1.1

sonatype-2026-000282 | Components Impacted | Sonatype Guide | Sonatype Guide