Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004551

sonatype-2025-004551

NPM Security Holding Packages - Mon Nov 10 2025

Published Nov 11, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	assignment-rules	0.0.1-security
npm	assignment-rules	1.0.0
npm	cookie-forwarding	0.0.1-security
npm	cookie-forwarding	1.0.0
npm	custom-actions	0.0.1-security
npm	custom-actions	1.0.0
npm	custom-bots	0.0.1-security
npm	custom-bots	1.0.0
npm	custom-domain	0.0.1-security
npm	custom-domain	1.0.0
npm	dependent-attributes	0.0.1-security
npm	dependent-attributes	1.0.0
npm	dependent-controlling-attributes	0.0.1-security
npm	dependent-controlling-attributes	1.0.0
npm	eslint-config-match	0.0.1-security
npm	eslint-config-match	1.0.0
npm	eslint-config-match	2.0.5
npm	eslint-config-match	3.0.5
npm	identity-verification	0.0.1-security
npm	identity-verification	1.0.0
npm	node-multispinner	0.0.1-security
npm	node-multispinner	0.2.1
npm	used-in-behaviors	0.0.1-security
npm	used-in-behaviors	1.0.0

sonatype-2025-004551 | Components Impacted | Sonatype Guide | Sonatype Guide