Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000322

sonatype-2026-000322

Malicious Packages - Wed Feb 04 2026 [Info Stealer]

Published Feb 4, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2026-731.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-717.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-733.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-784.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


pypi	cicd-ppe-test	1.0.0
npm	deuro-landing-page	5.9.9
npm	iconicwp-website	5.9.9
npm	monkey-tags	50.9.9
npm	monkey-tags	51.0.1
npm	monkey-tags	51.1.1
npm	monkey-tags	51.2.1
npm	monkey-tags	51.3.1
npm	monkey-tags	52.3.1
npm	monkey-tags	53.4.1
npm	monkey-tags	99.9.2
npm	partnerportalwebsite	99.9.9
npm	partnerss	99.9.9
npm	solongnerds	1.0.0
pypi	test-for-ppe	1.0.0
pypi	test-for-ppe	1.0.0

sonatype-2026-000322 | Components Impacted | Sonatype Guide