Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-004276
sonatype-2025-004276
NPM Security Holding Packages - Fri Oct 24 2025
Published Oct 24, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48560.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48587.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48763.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48767.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-48768.json
CVSS Score
Critical
10.0
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
create-artifact-worker
0.0.1-security
npm
create-artifact-worker
1.0.0
npm
deployments-enterprise
0.0.1-security
npm
deployments-enterprise
3.2.2
npm
deviceauth-enterprise
0.0.1-security
npm
deviceauth-enterprise
1.0.0
npm
deviceconnect
0.0.1-security
npm
deviceconnect
1.0.0
npm
generate-delta-worker
0.0.1-security
npm
generate-delta-worker
1.0.0
npm
inventory-enterprise
0.0.1-security
npm
inventory-enterprise
1.0.0
npm
mender-artifact
0.0.1-security
npm
mender-artifact
1.0.0
npm
mender-cli
0.0.1-security
npm
mender-cli
1.0.0
npm
mender-conductor
0.0.1-security
npm
mender-conductor
1.0.0
npm
mender-conductor-enterprise
0.0.1-security
npm
mender-conductor-enterprise
1.0.0
npm
mender-configure-module
0.0.1-security
npm
mender-configure-module
1.0.0
npm
mender-connect
0.0.1-security
npm
mender-connect
1.0.0
npm
mender-convert
0.0.1-security
npm
mender-convert
1.0.0
npm
mender-flash
0.0.1-security
npm
mender-flash
1.0.0
npm
mender-gateway
0.0.1-security
npm
mender-gateway
1.0.0
npm
mender-setup
0.0.1-security
npm
mender-setup
1.0.0
npm
mender-snapshot
0.0.1-security
npm
mender-snapshot
1.0.0
npm
mtls-ambassador
0.0.1-security
npm
mtls-ambassador
1.0.0
npm
node-get-listener
0.0.1-security
npm
node-get-listener
0.3.0
npm
node-global-win
0.0.1-security
npm
node-global-win
0.3.0
npm
react-modal-select
0.0.1-security
npm
react-modal-select
1.0.0
npm
starlight-for-rabbitmq-docs
0.0.1-security
npm
starlight-for-rabbitmq-docs
1.0.0
npm
tailwind-magic
0.0.1-security
npm
tailwind-magic
1.0.1
npm
tailwind-magic
1.1.1
npm
tailwind-magic
1.2.1
npm
tailwind-magic
1.3.1
npm
tailwind-magic
2.0.3
1-50 of 68
sonatype-2025-004276 | Components Impacted | Sonatype Guide | Sonatype Guide