Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000582

sonatype-2026-000582

Malicious Packages - Wed Feb 25 2026 [Info Stealer]

Published Feb 25, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1026.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1028.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1037.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1039.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1042.json

CVSS ScoreMedium

5.3

Ecosystem	Package	Version


npm	@dotprompt/promptly-darwin-arm64	1.0.1772043300
npm	examplereactnative76	0.0.1-security
npm	examplereactnative76	0.0.1
npm	examplereactnative76	0.0.4
npm	examplereactnative76	0.0.7
npm	examplereactnative76	0.0.8
npm	examplereactnative76	0.0.9
npm	get-fonts	9.9.9
npm	react-devtools-raycast	9.9.9
npm	rncalendareventsexample	0.0.1-security
npm	rncalendareventsexample	0.0.10
npm	rncalendareventsexample	0.0.11
npm	rncalendareventsexample	0.0.2
npm	rncalendareventsexample	0.0.3
npm	rncalendareventsexample	0.0.5
npm	rncalendareventsexample	0.0.6
npm	rncalendareventsexample	0.0.7
npm	rncalendareventsexample	0.0.8
npm	trae-browser-inspect	9.9.9

sonatype-2026-000582 | Components Impacted | Sonatype Guide | Sonatype Guide