Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000574

sonatype-2026-000574

Malicious Packages - Mon Feb 23 2026 [Info Stealer]

Published Feb 24, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1231.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1233.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1234.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	8x8-developer-docs	1.0.0
npm	8x8-developer-docs	2.0.0
npm	@schedaero/bacon	99432.540.1
npm	@schedaero/bacon	99440.540.1
npm	@schedaero/net-common	99431.540.1
npm	@schedaero/net-common	99440.540.1
npm	@schedaero/react-core	99434.540.1
npm	@schedaero/react-core	99440.540.1
npm	@schedaero/shared	99439.540.1
npm	@schedaero/shared	99440.540.1
npm	@schedaero/shared	99450.540.1
npm	@schedaero/yukon	99433.540.1
npm	@schedaero/yukon	99440.540.1
npm	canvas_webgl_minimal	11.11.13
npm	fhgfhgfhfghhffhfgh	11.11.11
npm	fhgfhgfhfghhffhfgh	11.11.12
npm	pcl-build-docroot	0.0.1-security
npm	pcl-build-docroot	99.9.9
npm	playwright-config	20.20.20
npm	praxis-scripts	99.9.9
npm	projectrtert	0.0.1-security
npm	projectrtert	1.0.0
npm	unibody	99.9.9
npm	uxproject11	0.0.1-security
npm	uxproject11	1.0.0
npm	wildhunter	1.0.0

sonatype-2026-000574 | Components Impacted | Sonatype Guide | Sonatype Guide