Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000585

sonatype-2026-000585

Malicious Packages - Wed Feb 25 2026 [Lazarus] [Dropper]

Published Feb 25, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	jsonify-bundler	4.3.10
npm	jsonify-bundler	4.3.11
npm	jsonify-bundler	4.3.12
npm	jsonify-bundler	4.3.13
npm	jsonify-bundler	4.3.14
npm	jsonify-bundler	4.3.15
npm	jsonify-bundler	4.3.16
npm	jsonify-bundler	4.3.17
npm	jsonify-bundler	4.3.18
npm	jsonify-bundler	4.3.19
npm	jsonify-bundler	4.3.20
npm	jsonify-bundler	4.3.21
npm	jsonify-bundler	4.3.9

sonatype-2026-000585 | Components Impacted | Sonatype Guide | Sonatype Guide