sonatype-2026-003508 | Components Impacted | Sonatype Guide

sonatype-2026-003508

Malicious Packages - Mon Jun 01 2026 [Dropper] [Hijack] [Credential Info Stealer]

Published Jun 1, 2026

CVSS Score: High 8.7

Security Details

Components Impacted

Ecosystem	Package	Version
	@redhat-cloud-services/chrome	2.3.1
	@redhat-cloud-services/chrome	2.3.2
	@redhat-cloud-services/chrome	2.3.4
	@redhat-cloud-services/compliance-client	4.0.3
	@redhat-cloud-services/compliance-client	4.0.4
	@redhat-cloud-services/compliance-client	4.0.6
	@redhat-cloud-services/config-manager-client	5.0.4
	@redhat-cloud-services/config-manager-client	5.0.5
	@redhat-cloud-services/config-manager-client	5.0.7
	@redhat-cloud-services/entitlements-client	4.0.11
	@redhat-cloud-services/entitlements-client	4.0.12
	@redhat-cloud-services/entitlements-client	4.0.14
	@redhat-cloud-services/eslint-config-redhat-cloud-services	3.2.1
	@redhat-cloud-services/eslint-config-redhat-cloud-services	3.2.2
	@redhat-cloud-services/eslint-config-redhat-cloud-services	3.2.4
	@redhat-cloud-services/frontend-components	7.7.2
	@redhat-cloud-services/frontend-components	7.7.3
	@redhat-cloud-services/frontend-components	7.7.5
	@redhat-cloud-services/frontend-components-advisor-components	3.8.2
	@redhat-cloud-services/frontend-components-advisor-components	3.8.4
	@redhat-cloud-services/frontend-components-advisor-components	3.8.6
	@redhat-cloud-services/frontend-components-config	6.11.3
	@redhat-cloud-services/frontend-components-config	6.11.4
	@redhat-cloud-services/frontend-components-config	6.11.6
	@redhat-cloud-services/frontend-components-config-utilities	4.11.2
	@redhat-cloud-services/frontend-components-config-utilities	4.11.3
	@redhat-cloud-services/frontend-components-config-utilities	4.11.5
	@redhat-cloud-services/frontend-components-notifications	6.9.2
	@redhat-cloud-services/frontend-components-notifications	6.9.3
	@redhat-cloud-services/frontend-components-notifications	6.9.5
	@redhat-cloud-services/frontend-components-remediations	4.9.2
	@redhat-cloud-services/frontend-components-remediations	4.9.3
	@redhat-cloud-services/frontend-components-remediations	4.9.5
	@redhat-cloud-services/frontend-components-testing	1.2.1
	@redhat-cloud-services/frontend-components-testing	1.2.2
	@redhat-cloud-services/frontend-components-testing	1.2.4
	@redhat-cloud-services/frontend-components-translations	4.4.1
	@redhat-cloud-services/frontend-components-translations	4.4.2
	@redhat-cloud-services/frontend-components-translations	4.4.4
	@redhat-cloud-services/frontend-components-utilities	7.4.1
	@redhat-cloud-services/frontend-components-utilities	7.4.2
	@redhat-cloud-services/frontend-components-utilities	7.4.4
	@redhat-cloud-services/hcc-feo-mcp	0.3.1
	@redhat-cloud-services/hcc-feo-mcp	0.3.2
	@redhat-cloud-services/hcc-feo-mcp	0.3.4
	@redhat-cloud-services/hcc-kessel-mcp	0.3.1
	@redhat-cloud-services/hcc-kessel-mcp	0.3.2
	@redhat-cloud-services/hcc-kessel-mcp	0.3.4
	@redhat-cloud-services/hcc-pf-mcp	0.6.1
	@redhat-cloud-services/hcc-pf-mcp	0.6.2