sonatype-2026-003277 | Components Impacted | Sonatype Guide

sonatype-2026-003277

Malicious Packages - Thu May 21 2026

Published May 21, 2026

CVSS Score: High 8.7

Security Details

Components Impacted

Ecosystem Package Version
@common-stack/generate-plugin 10.0.1-alpha.0
@common-stack/generate-plugin 9.0.2-alpha.21
@common-stack/generate-plugin 9.0.2-alpha.22
@common-stack/generate-plugin 9.0.2-alpha.23
@common-stack/generate-plugin 9.0.2-alpha.24
@common-stack/generate-plugin 9.0.4-alpha.0
@common-stack/generate-plugin 9.0.4-alpha.1
@common-stack/generate-plugin 9.0.5-alpha.0
@common-stack/generate-plugin 9.0.5-alpha.1
@common-stack/generate-plugin 9.0.5-alpha.2
@common-stack/generate-plugin 9.0.5-alpha.3
@common-stack/generate-plugin 9.0.5-alpha.4
@common-stack/generate-plugin 9.0.5-alpha.5
@common-stack/generate-plugin 9.0.6-alpha.0
@common-stack/generate-plugin 9.0.6-alpha.1