Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000557

sonatype-2026-000557

Malicious Packages - Mon Feb 23 2026 [Info Stealer]

Published Feb 23, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2026-977.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1027.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1050.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1220.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1228.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1230.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1232.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-980.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-981.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-985.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@schedaero/bacon	99432.540.1
npm	@schedaero/bacon	99440.540.1
npm	@schedaero/bacon	99450.540.1
npm	@schedaero/net-common	99431.540.1
npm	@schedaero/react-core	99434.540.1
npm	@schedaero/react-core	99440.540.1
npm	@schedaero/react-core	99450.540.1
npm	@schedaero/shared	99439.540.1
npm	@schedaero/yukon	99433.540.1
npm	@schedaero/yukon	99440.540.1
npm	@schedaero/yukon	99450.540.1
pypi	airbnb-identity	156.1.2
npm	conduit-auth-shared	6.4.1
npm	conduit-auth-shared	6.4.2
npm	conduit-auth-shared	6.4.3
npm	conduit-core	0.0.1
npm	conduit-core	2.95.0
npm	conduit-core	6.4.1
npm	conduit-core	6.4.3
npm	conduit-nap	6.4.1
npm	conduit-nap	6.4.3
npm	conduit-storage	6.4.1
npm	conduit-storage	6.4.3
npm	conduit-utils	0.0.1
npm	conduit-utils	2.95.0
npm	conduit-utils	2.96.0
npm	conduit-utils	2.97.0
npm	conduit-utils	2.98.0
npm	conduit-utils	2.99.0
npm	conduit-utils	3.99.0
npm	conduit-utils	6.4.1
npm	conduit-utils	6.4.3
npm	conduit-view-types	6.4.1
npm	conduit-view-types	6.4.3
npm	corp-build-utils-poc	0.0.1-security
npm	corp-build-utils-poc	99.9.10
npm	corp-build-utils-poc	99.9.11
npm	corp-build-utils-poc	99.9.12
npm	corp-build-utils-poc	99.9.13
npm	corp-build-utils-poc	99.9.14
npm	corp-build-utils-poc	99.9.16
npm	corp-build-utils-poc	99.9.17
npm	corp-build-utils-poc	99.9.18
npm	corp-build-utils-poc	99.9.19
npm	corp-build-utils-poc	99.9.20
npm	corp-build-utils-poc	99.9.21
npm	corp-build-utils-poc	99.9.22
npm	corp-build-utils-poc	99.9.23
npm	corp-build-utils-poc	99.9.24
npm	corp-build-utils-poc	99.9.25

sonatype-2026-000557 | Components Impacted | Sonatype Guide | Sonatype Guide