Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004370

sonatype-2025-004370

NPM Security Holding Packages - Fri Oct 31 2025

Published Oct 31, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49269.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49275.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49276.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	cordova-plugin-globalization.moment	0.0.1-security
npm	cordova-plugin-globalization.moment	1.0.0
npm	genesis-drop-actions	0.0.1-security
npm	genesis-drop-actions	1.0.0
npm	hemi-tunnel-actions	0.0.1-security
npm	hemi-tunnel-actions	1.0.0
npm	hemi-viem-stake-actions	0.0.1-security
npm	hemi-viem-stake-actions	1.0.0
npm	sabaoa-tg-api	0.0.1-security
npm	sabaoa-tg-api	1.0.0
npm	sabay-tg-api	0.0.1-security
npm	sabay-tg-api	1.0.0
npm	sai-tg-api	0.0.1-security
npm	sai-tg-api	1.0.0
npm	salli-tg-api	0.0.1-security
npm	salli-tg-api	1.0.0
npm	soxhob-client	0.0.1-security
npm	soxhob-client	1.0.0
npm	tailwindcss-utility	0.0.1-security
npm	tailwindcss-utility	1.0.0
npm	tailwindcss-utility	1.0.1
npm	unplugin-vue-component	0.0.1-security
npm	unplugin-vue-component	28.0.0
npm	unplugin-vue-component	28.0.1
npm	unplugin-vue-component	28.0.2
npm	ve-hemi-actions	0.0.1-security
npm	ve-hemi-actions	1.0.0
npm	vue2-script-ext-html-webpack-plugin	0.0.1-security
npm	vue2-script-ext-html-webpack-plugin	2.1.10
npm	vue2-script-ext-html-webpack-plugin	2.1.5
npm	vue2-script-ext-html-webpack-plugin	2.1.6
npm	vue2-script-ext-html-webpack-plugin	2.1.8
npm	vue2-script-ext-html-webpack-plugin	2.1.9
npm	web3-wc	0.0.1-security
npm	web3-wc	4.15.6

sonatype-2025-004370 | Components Impacted | Sonatype Guide | Sonatype Guide