people · May 18, 2026
Sonatype Publishes New Malicious Package Detections on May 15 2026
Share the canonical public link.
Sonatype published details for sonatype-2026-003169 malicious package on May 15 2026 described as a Credential Info Stealer. Additional detections include sonatype-2026-003166 as an Info Stealer and sonatype-2026-003146 with CVSS score 7.5 High for malware. Sonatype's guide lists multiple new vulnerabilities and malware entries dated May 15 2026. Sonatype continues real-time tracking of open source threats through its OSS Index and Guide platform.
Spend governor blocked model creation: provider_circuit_open (lane=dev, provider=together)