Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

sonatype-2025-004963 | Security Details | Sonatype Guide | Sonatype Guide

Vulnerabilities

sonatype-2025-004963

sonatype-2025-004963

NPM Security Holding Packages - Thu Nov 13 2025

Published Nov 13, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102091.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109799.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-118543.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-118945.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119068.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119723.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119731.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126969.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127247.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127332.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129679.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-133487.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-137100.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-62901.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-63989.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64110.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-65287.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-66186.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-83348.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88322.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-90767.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-92665.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-99697.json

CVSS ScoreCritical

10.0

sonatype-2025-004963 Security Details

CVE ID: sonatype-2025-004963
CWE: N/A
CVE Description: NPM Security Holding Packages - Thu Nov 13 2025
Published: Nov 13, 2025
CVSS Score & Severity: 10.0Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware: malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems: affected
Source: Sonatype
References: https://help.sonatype.com/en/sonatype-malware-data.htmlTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102091.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109799.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-118543.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-118945.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119068.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119723.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119731.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126969.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127247.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127332.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129679.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-133487.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-137100.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-62901.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-63989.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64110.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-65287.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-66186.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-83348.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88322.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-90767.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-92665.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-99697.jsonTHIRD_PARTY