Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004148

sonatype-2025-004148

NPM Security Holding Packages - Wed Oct 15 2025

Published Oct 15, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48489.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48493.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	cryptocom-corp-tools	0.0.1-security
npm	cryptocom-corp-tools	999.999.999
npm	cryptocom-internal-auth	0.0.1-security
npm	cryptocom-internal-auth	999.999.999
npm	cryptocom-private-api	0.0.1-security
npm	cryptocom-private-api	999.999.999
npm	css-platform-js	0.0.1-security
npm	css-platform-js	7.7.7
npm	css-platform-js	7.7.8
npm	curve-ui-kit-security-notice	0.0.1-security
npm	curve-ui-kit-security-notice	1.0.0
npm	deficonnect-internal-utils	0.0.1-security
npm	deficonnect-internal-utils	999.999.999
npm	deficonnect-private-sdk	0.0.1-security
npm	deficonnect-private-sdk	999.999.999
npm	eero_blog	0.0.1-security
npm	eero_blog	7.7.7
npm	gardr-finn-js	0.0.1-security
npm	gardr-finn-js	7.7.7
npm	scouthus921	0.0.1-security
npm	scouthus921	1.20.22
npm	summerfi-eslint-config-security-notice	0.0.1-security
npm	summerfi-eslint-config-security-notice	1.0.0
npm	summerfi-typescript-config-security-notice	0.0.1-security
npm	summerfi-typescript-config-security-notice	1.0.0
npm	synthetixio-deps-security-notice	0.0.1-security
npm	synthetixio-deps-security-notice	1.0.0

sonatype-2025-004148 | Components Impacted | Sonatype Guide | Sonatype Guide