Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004122

sonatype-2025-004122

NPM Security Holding Packages - Mon Oct 13 2025

Published Oct 13, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	apache-httpclient10	0.0.1-security.0
npm	apache-httpclient10	0.0.1-security.1
npm	apache-httpclient10	0.0.1-security
npm	apache-httpclient10	1.0.0
npm	apache-httpclient9	0.0.1-security.0
npm	apache-httpclient9	0.0.1-security.1
npm	apache-httpclient9	0.0.1-security
npm	apache-httpclient9	1.0.0
npm	celestial-map	0.0.1-security.0
npm	celestial-map	0.0.1-security.1
npm	celestial-map	0.0.1-security
npm	celestial-map	1.0.1
npm	infinity-loop	0.0.1-security.1
npm	infinity-loop	0.0.1-security
npm	infinity-loop	1.0.1
npm	lunar-echo	0.0.1-security.1
npm	lunar-echo	0.0.1-security
npm	lunar-echo	1.0.1
npm	nova-burst	0.0.1-security.1
npm	nova-burst	0.0.1-security
npm	nova-burst	1.0.1
npm	phantom-shade	0.0.1-security.1
npm	phantom-shade	0.0.1-security
npm	phantom-shade	1.0.1
npm	prism-light	0.0.1-security.1
npm	prism-light	0.0.1-security
npm	prism-light	1.0.1

sonatype-2025-004122 | Components Impacted | Sonatype Guide | Sonatype Guide