Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000373

sonatype-2026-000373

Potentially Unwanted Applications - Mon Feb 09 2026 [PUA]

Published Feb 9, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1160.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1163.json

CVSS ScoreNone

0.0

Ecosystem	Package	Version


npm	xpack-subscription	0.0.1-security
npm	xpack-subscription	1.0.0
npm	xpack-subscription	1.0.1
npm	xpack-subscription	1.0.2
npm	xpack-video-submission	0.0.1-security
npm	xpack-video-submission	1.0.0
npm	xpack-video-submission	1.0.10
npm	xpack-video-submission	1.0.1
npm	xpack-video-submission	1.0.2
npm	xpack-video-submission	1.0.3
npm	xpack-video-submission	1.0.4
npm	xpack-video-submission	1.0.5
npm	xpack-video-submission	1.0.6
npm	xpack-video-submission	1.0.7
npm	xpack-video-submission	1.0.8
npm	xpack-video-submission	1.0.9

sonatype-2026-000373 | Components Impacted | Sonatype Guide | Sonatype Guide