Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000321

sonatype-2026-000321

Malicious Packages - Wed Feb 04 2026 [Credential Info Stealer]

Published Feb 4, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-734.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-775.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-776.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-777.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-778.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-779.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-780.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-781.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-782.json

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	ac-array	99.9.9
npm	ac-checksum	99.9.9
npm	ac-dom-events	99.9.9
npm	ac-dom-nodes	99.9.9
npm	ac-dom-styles	99.9.9
npm	ac-element-engagement	99.9.9
npm	ac-feature	99.9.9
npm	ac-polyfills	99.9.9
npm	fixerpabo_jkbts	1.0.0
npm	fixerpabo_jkbts	1.1.0
npm	hackpreinstall	1.0.0
npm	xpack-per-user	1.0.1
npm	xpack-subscription-test	1.0.0
npm	xpack-subscription-test	1.0.1
npm	xpack-subscription-test	1.0.2
npm	xpack-subscription-test	1.0.3
npm	xpack-subscription-test	1.0.4
npm	xpack-subscription-test	1.0.5

sonatype-2026-000321 | Components Impacted | Sonatype Guide