Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2026-000523
sonatype-2026-000523
Malicious Packages - Tue Feb 17 2026 [Dropper]
Published Feb 19, 2026
https://help.sonatype.com/en/sonatype-malware-data.html
CVSS Score
High
8.7
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
beta-express
1.0.0
npm
beta-express
1.1.0
npm
beta-express
1.1.1
npm
beta-express
1.1.2
npm
beta-express
1.1.3
npm
chai-promise-tools
3.3.5
npm
chai-tools
3.3.5
npm
chai-tools
4.3.0
npm
cookie-parsers-env
3.3.5
npm
observite
0.0.1
1-10 of 10
sonatype-2026-000523 | Components Impacted | Sonatype Guide
