Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000553

sonatype-2026-000553

Malicious Packages - Mon Feb 23 2026 [Credential Info Stealer]

Published Feb 23, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


npm	ctf-payload	1.0.0
npm	ctf-payload	1.0.10
npm	ctf-payload	1.0.11
npm	ctf-payload	1.0.12
npm	ctf-payload	1.0.13
npm	ctf-payload	1.0.14
npm	ctf-payload	1.0.15
npm	ctf-payload	1.0.16
npm	ctf-payload	1.0.17
npm	ctf-payload	1.0.18
npm	ctf-payload	1.0.19
npm	ctf-payload	1.0.1
npm	ctf-payload	1.0.20
npm	ctf-payload	1.0.21
npm	ctf-payload	1.0.22
npm	ctf-payload	1.0.23
npm	ctf-payload	1.0.24
npm	ctf-payload	1.0.25
npm	ctf-payload	1.0.26
npm	ctf-payload	1.0.27
npm	ctf-payload	1.0.28
npm	ctf-payload	1.0.29
npm	ctf-payload	1.0.2
npm	ctf-payload	1.0.30
npm	ctf-payload	1.0.31
npm	ctf-payload	1.0.32
npm	ctf-payload	1.0.33
npm	ctf-payload	1.0.34
npm	ctf-payload	1.0.35
npm	ctf-payload	1.0.36
npm	ctf-payload	1.0.37
npm	ctf-payload	1.0.38
npm	ctf-payload	1.0.39
npm	ctf-payload	1.0.3
npm	ctf-payload	1.0.40
npm	ctf-payload	1.0.41
npm	ctf-payload	1.0.42
npm	ctf-payload	1.0.43
npm	ctf-payload	1.0.44
npm	ctf-payload	1.0.45
npm	ctf-payload	1.0.46
npm	ctf-payload	1.0.47
npm	ctf-payload	1.0.48
npm	ctf-payload	1.0.49
npm	ctf-payload	1.0.4
npm	ctf-payload	1.0.50
npm	ctf-payload	1.0.51
npm	ctf-payload	1.0.52
npm	ctf-payload	1.0.53
npm	ctf-payload	1.0.54

sonatype-2026-000553 | Components Impacted | Sonatype Guide | Sonatype Guide