Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000367

sonatype-2026-000367

Malicious Packages - Mon Feb 09 2026 [Info Stealer]

Published Feb 9, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1151.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	openclaw-droid	0.0.1-security
npm	openclaw-droid	1.0.0
npm	openclaw-droid	1.0.1
npm	openclaw-droid	1.0.2
npm	openclaw-droid	1.0.4
npm	openclaw-droid	1.0.5
npm	openclaw-droid	2.0.1
npm	openclaw-droid	2.0.2
npm	openclaw-droid	2.0.4
npm	openclaw-droid	2.0.5
npm	openclaw-droid	2.0.6
npm	openclaw-droid	2.1.0
npm	openclaw-droid	3.0.0
npm	openclaw-droid	3.0.1
npm	openclaw-droid	3.0.2
npm	openclaw-droid	3.0.4
npm	openclaw-droid	3.0.5
npm	openclaw-droid	3.10.0
npm	openclaw-droid	3.15.0
npm	openclaw-droid	4.20.0
npm	openclaw-droid	4.20.69
npm	openclaw-droid	5.0.0
npm	openclaw-droid	5.1.0
npm	openclaw-droid	5.2.0

sonatype-2026-000367 | Components Impacted | Sonatype Guide | Sonatype Guide