Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004097

sonatype-2025-004097

NPM Security Holding Packages - Fri Oct 10 2025

Published Oct 10, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	advertising-charts	0.0.1-security
npm	advertising-charts	99.0.0
npm	buyingflow-core-nav-web	0.0.1-security
npm	buyingflow-core-nav-web	99.0.0
npm	cbt-gs-switcher-library	0.0.1-security
npm	cbt-gs-switcher-library	99.0.0
npm	frontend-metrics-collector-sdk	0.0.1-security
npm	frontend-metrics-collector-sdk	99.0.0
npm	frontend-prevent-open-redirect	0.0.1-security
npm	frontend-prevent-open-redirect	99.0.0
npm	nodelogex	0.0.1-security
npm	nodelogex	3.17.0
npm	nodelogex	3.17.1
npm	sp-web-utils-lib	0.0.1-security
npm	sp-web-utils-lib	99.0.0

sonatype-2025-004097 | Components Impacted | Sonatype Guide | Sonatype Guide