# sonatype-2026-003277

Malicious Packages - Thu May 21 2026

Published May 21, 2026

CVSS Score: High 8.7

### Security Details

#### Components Impacted

| Ecosystem | Package | Version |
| --- | --- | --- |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/10.0.1-alpha.0) | [10.0.1-alpha.0](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/10.0.1-alpha.0) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.21) | [9.0.2-alpha.21](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.21) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.22) | [9.0.2-alpha.22](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.22) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.23) | [9.0.2-alpha.23](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.23) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.24) | [9.0.2-alpha.24](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.2-alpha.24) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.4-alpha.0) | [9.0.4-alpha.0](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.4-alpha.0) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.4-alpha.1) | [9.0.4-alpha.1](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.4-alpha.1) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.0) | [9.0.5-alpha.0](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.0) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.1) | [9.0.5-alpha.1](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.1) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.2) | [9.0.5-alpha.2](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.2) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.3) | [9.0.5-alpha.3](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.3) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.4) | [9.0.5-alpha.4](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.4) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.5) | [9.0.5-alpha.5](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.5-alpha.5) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.6-alpha.0) | [9.0.6-alpha.0](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.6-alpha.0) |
|  | [@common-stack/generate-plugin](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.6-alpha.1) | [9.0.6-alpha.1](https://guide.sonatype.com/component/undefined/%40common-stack%2Fgenerate-plugin/9.0.6-alpha.1) |