Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-005040
sonatype-2025-005040
NPM Security Holding Packages - Thu Nov 13 2025
Published Nov 13, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101013.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-103805.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-103935.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105136.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105274.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-114071.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115004.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-116985.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-117681.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-119982.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-120813.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-122800.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123149.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123680.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123887.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58787.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58846.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-77380.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78083.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78561.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78815.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-79592.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-81287.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-85816.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-87883.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88428.json
CVSS Score
Critical
10.0
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
combined_duck_z3n
0.0.1-security.0
npm
combined_duck_z3n
0.0.1-security
npm
combined_duck_z3n
2.3.2
npm
correct_crow_z3n
0.0.1-security.0
npm
correct_crow_z3n
0.0.1-security.1
npm
correct_crow_z3n
0.0.1-security
npm
correct_crow_z3n
1.3.2
npm
fair_rattlesnake_z3n
0.0.1-security.0
npm
fair_rattlesnake_z3n
0.0.1-security
npm
fair_rattlesnake_z3n
1.4.4
npm
fascinating_lemming_z3n
0.0.1-security.0
npm
fascinating_lemming_z3n
0.0.1-security
npm
fascinating_lemming_z3n
2.1.2
npm
formal_parrot_z3n
0.0.1-security.0
npm
formal_parrot_z3n
0.0.1-security.1
npm
formal_parrot_z3n
0.0.1-security
npm
formal_parrot_z3n
1.1.1
npm
gentle_asp_z3n
0.0.1-security.0
npm
gentle_asp_z3n
0.0.1-security.1
npm
gentle_asp_z3n
0.0.1-security
npm
gentle_asp_z3n
2.1.4
npm
gross_meerkat_z3n
0.0.1-security.0
npm
gross_meerkat_z3n
0.0.1-security
npm
gross_meerkat_z3n
1.1.1
npm
hidden_rodent_z3n
0.0.1-security.0
npm
hidden_rodent_z3n
0.0.1-security
npm
hidden_rodent_z3n
3.2.2
npm
hostile_porcupine_z3n
0.0.1-security.0
npm
hostile_porcupine_z3n
0.0.1-security.1
npm
hostile_porcupine_z3n
0.0.1-security
npm
hostile_porcupine_z3n
2.2.1
npm
identical_wallaby_z3n
0.0.1-security.0
npm
identical_wallaby_z3n
0.0.1-security.1
npm
identical_wallaby_z3n
0.0.1-security
npm
identical_wallaby_z3n
2.1.4
npm
intellectual_cicada_z3n
0.0.1-security.0
npm
intellectual_cicada_z3n
0.0.1-security.1
npm
intellectual_cicada_z3n
0.0.1-security
npm
intellectual_cicada_z3n
4.1.2
npm
joint_crawdad_z3n
0.0.1-security.0
npm
joint_crawdad_z3n
0.0.1-security.1
npm
joint_crawdad_z3n
0.0.1-security
npm
joint_crawdad_z3n
1.3.1
npm
large_antelope_z3n
0.0.1-security.0
npm
large_antelope_z3n
0.0.1-security
npm
large_antelope_z3n
3.1.2
npm
like_hookworm_z3n
0.0.1-security.0
npm
like_hookworm_z3n
0.0.1-security.1
npm
like_hookworm_z3n
0.0.1-security
npm
like_hookworm_z3n
1.4.1
1-50 of 110
sonatype-2025-005040 | Components Impacted | Sonatype Guide | Sonatype Guide