# sonatype-2026-001959

Malicious Packages - Wed Apr 08 2026 [Credential Info Stealer/Propagation]

Published Apr 8, 2026

CVSS Score High

7.1

## Security Details

### Components Impacted

### sonatype-2026-001959 Security Details

**CVE ID** sonatype-2026-001959  
**CWE** N/A  
**CVE Description** Malicious Packages - Wed Apr 08 2026 [Credential Info Stealer/Propagation]  
**Published** Apr 8, 2026  
**CVSS Score & Severity**  
7.1 High  
**CVSS Vector** CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N  
**EPSS Score** 0%

### Malware

malware  
**KEV Status**  
Not in KEV Catalog: No known exploits

### Affected Ecosystems

affected  
**Source** Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-2507.json)  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-2508.json)