Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000693

sonatype-2026-000693

Malicious Packages - Tue Mar 03 2026 [Lazarus] [Dropper]

Published Mar 3, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	argon-node	3.5.7
npm	argon-web3-chain	2.4.5
npm	argonnode	2.4.5
npm	chai-as-prompt	1.2.7
npm	chai-as-prop	1.1.7
npm	chai-as-prop	5.1.7
npm	chai-as-sync	1.1.7
npm	chai-async	1.1.7
npm	chai-auth	5.1.0
npm	chai-bin	1.1.7
npm	chai-chain-argon	3.5.7
npm	chai-chain-neurograde	2.3.5
npm	chai-chain-sinon	2.4.5
npm	chai-conf	1.1.7
npm	chai-grab	1.1.7
npm	chai-iotype	1.1.7
npm	chai-mui	1.1.9
npm	chai-nerd	1.1.7
npm	chai-pack	1.1.7
npm	chai-pack	1.1.9
npm	chai-pack	5.1.0
npm	chai-patch	1.1.7
npm	chai-prop	1.1.7
npm	chai-proto	1.1.7
npm	chai-reg	1.1.9
npm	chai-set	1.1.9
npm	chai-sub	1.1.7
npm	chai-sync	1.1.9
npm	chai-type	5.1.0
npm	chai-types	1.1.7
npm	chai-vest	1.1.9
npm	chain-argon	2.4.5
npm	chain-cognivault	2.3.5
npm	chain-multer	3.5.7
npm	chain-neurograde	2.4.7
npm	dotenv-express	2.5.5
npm	env-embed	2.5.5
npm	env-expanded	2.5.5
npm	env-express	2.5.5
npm	env-express-cli	2.5.5
npm	env-node-cli	2.5.5
npm	env-nodejs	2.5.5
npm	node-argon	2.4.5
npm	node-cognivault	2.3.5
npm	node-multer	3.5.7
npm	node-neurograde	2.4.7
npm	nodeneurograde	2.3.5
npm	shield-node	2.4.5
npm	sinon-node	2.4.5
npm	sinon-web3-chain	2.4.5

sonatype-2026-000693 | Components Impacted | Sonatype Guide | Sonatype Guide