Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-004896
sonatype-2025-004896
NPM Security Holding Packages - Thu Nov 13 2025
Published Nov 13, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-125099.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-125541.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-125666.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-125672.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126542.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126935.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127143.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127335.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-128168.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-128169.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-128421.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-128659.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129129.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129430.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129737.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130336.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130355.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130380.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130381.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130440.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130888.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-86084.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-87989.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-87994.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88005.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-91767.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-91968.json
CVSS Score
Critical
10.0
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
absent_rat_z3n
0.0.1-security
npm
absent_rat_z3n
1.4.1
npm
bare_whippet_z3n
0.0.1-security
npm
bare_whippet_z3n
1.2.1
npm
coastal_dinosaur_z3n
0.0.1-security
npm
coastal_dinosaur_z3n
3.2.2
npm
dangerous_beetle_z3n
0.0.1-security
npm
dangerous_beetle_z3n
1.4.4
npm
deafening_goose_z3n
0.0.1-security
npm
deafening_goose_z3n
3.3.2
npm
evil_gamefowl_z3n
0.0.1-security
npm
evil_gamefowl_z3n
3.3.3
npm
final_boar_z3n
0.0.1-security
npm
final_boar_z3n
4.3.2
npm
glamorous_tarsier_z3n
0.0.1-security
npm
glamorous_tarsier_z3n
3.1.2
npm
gleaming_walrus_z3n
0.0.1-security
npm
gleaming_walrus_z3n
1.4.4
npm
happy_bobolink_z3n
0.0.1-security
npm
happy_bobolink_z3n
1.4.4
npm
impressed_rabbit_z3n
0.0.1-security
npm
impressed_rabbit_z3n
1.2.1
npm
legislative_ocelot_z3n
0.0.1-security
npm
legislative_ocelot_z3n
4.4.4
npm
legitimate_octopus_z3n
0.0.1-security
npm
legitimate_octopus_z3n
4.1.3
npm
lonely_koala_z3n
0.0.1-security
npm
lonely_koala_z3n
1.2.2
npm
loose_peacock_z3n
0.0.1-security
npm
loose_peacock_z3n
4.1.1
npm
lucky_capybara_z3n
0.0.1-security
npm
lucky_capybara_z3n
2.3.1
npm
magic_bonobo_z3n
0.0.1-security
npm
magic_bonobo_z3n
1.2.4
npm
misleading_blackbird_z3n
0.0.1-security
npm
misleading_blackbird_z3n
3.2.2
npm
okay_gayal_z3n
0.0.1-security
npm
okay_gayal_z3n
3.1.2
npm
promising_bear_z3n
0.0.1-security
npm
promising_bear_z3n
3.3.4
npm
residential_bovid_z3n
0.0.1-security
npm
residential_bovid_z3n
3.4.1
npm
sticky_scallop_z3n
0.0.1-security
npm
sticky_scallop_z3n
4.2.2
npm
subjective_lobster_z3n
0.0.1-security
npm
subjective_lobster_z3n
1.1.4
npm
supposed_gayal_z3n
0.0.1-security
npm
supposed_gayal_z3n
4.3.3
npm
supposed_gazelle_z3n
0.0.1-security
npm
supposed_gazelle_z3n
4.2.4
1-50 of 60
sonatype-2025-004896 | Components Impacted | Sonatype Guide | Sonatype Guide