# sonatype-2026-000542

Malicious Packages - Fri Feb 20 2026 \[SANDWORM_MODE\] \[Secrets Exfiltration, Data Corruption, Backdoor\]

Published Feb 20, 2026

CVSS Score: Critical

## Security Details

### sonatype-2026-000542 Security Details

**CVE ID:** sonatype-2026-000542  
**CWE:** N/A  
**CVE Description:** Malicious Packages - Fri Feb 20 2026 \[SANDWORM_MODE\] \[Secrets Exfiltration, Data Corruption, Backdoor\]

**Published:** Feb 20, 2026  
**CVSS Score & Severity:** 9.3 Critical  
**CVSS Vector:** CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:H/SA:N  
**EPSS Score:** 0%

### Malware  
**KEV Status:** Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source:** Sonatype

### References

- [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-952.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-952.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-953.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-953.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-954.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-954.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-955.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-955.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-956.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-956.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-957.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-957.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-958.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-958.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-959.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-959.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-960.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-960.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-961.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-961.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-962.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-962.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-963.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-963.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-964.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-964.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-965.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-965.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-966.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-966.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-967.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-967.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-968.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-968.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-969.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-969.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-970.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-970.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-971.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-971.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-973.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-973.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-974.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-974.json") THIRD_PARTY