Skip to content
OpenAdvisories

Package · npm

sonatype

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-w8fh-pvq2-x8c4

    Malicious npm package: sonatype

    The npm `sonatype` package has been identified as malicious and removed from the npm package registry. ## Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer …

    sonatype npm