Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000657

sonatype-2026-000657

Malicious Packages - Mon Mar 02 2026 [Dropper]

Published Mar 3, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	svg-content-validation	1.0.0
npm	svg-content-validation	1.0.10
npm	svg-content-validation	1.0.11
npm	svg-content-validation	1.0.12
npm	svg-content-validation	1.0.13
npm	svg-content-validation	1.0.14
npm	svg-content-validation	1.0.15
npm	svg-content-validation	1.0.16
npm	svg-content-validation	1.0.17
npm	svg-content-validation	1.0.18
npm	svg-content-validation	1.0.19
npm	svg-content-validation	1.0.1
npm	svg-content-validation	1.0.2
npm	svg-content-validation	1.0.3
npm	svg-content-validation	1.0.4
npm	svg-content-validation	1.0.5
npm	svg-content-validation	1.0.6
npm	svg-content-validation	1.0.7
npm	svg-content-validation	1.0.8
npm	svg-content-validation	1.0.9
npm	svg-safety-tool	1.0.0
npm	svg-safety-tool	1.0.1
npm	svg-safety-tool	1.0.2
npm	svg-safety-tool	1.0.3
npm	svg-safety-tool	1.0.4
npm	svg-safety-tool	1.0.5
npm	svg-sanitizer-tool	1.0.5
npm	svg-sanitizer-tool	1.0.6

sonatype-2026-000657 | Components Impacted | Sonatype Guide | Sonatype Guide