Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000449

sonatype-2026-000449

Malicious Packages - Tue Feb 17 2026 [Info Stealer]

Published Feb 17, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2026-913.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1024.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1025.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-929.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-944.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-971.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@protonme/routing	0.0.1-security
npm	@protonme/routing	0.0.1
npm	@protonme/routing	0.0.2
npm	@protonme/routing	0.0.3
npm	@unitedcapitalfinancialadvisors/finlife-component-library	0.0.1-security
npm	@unitedcapitalfinancialadvisors/finlife-component-library	0.0.1
npm	@unitedcapitalfinancialadvisors/finlife-component-library	0.0.2
npm	@unitedcapitalfinancialadvisors/finlife-component-library	0.0.3
npm	canvas_webgl_minimal	11.11.13
npm	fhgfhgfhfghhffhfgh	11.11.11
npm	fhgfhgfhfghhffhfgh	11.11.12
pypi	groq-ppe-pkg	1.0.0
npm	playwright-config	20.20.20
npm	realestate-ask	0.0.1-security
npm	realestate-ask	0.0.200
npm	suport-color	0.0.1-security
npm	suport-color	1.0.0
npm	suport-color	1.0.1
npm	suport-color	1.0.2
npm	suport-color	1.0.3
npm	vds-monarch	0.0.1-security
npm	vds-monarch	1.0.0
npm	vds-monarch	1.0.1
npm	vds-monarch	1.0.3
npm	vds-monarch	1.0.4
npm	vds-monarch	1.0.5

sonatype-2026-000449 | Components Impacted | Sonatype Guide | Sonatype Guide