Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-006640
sonatype-2025-006640
NPM Security Holding Packages - Fri Nov 14 2025
Published Nov 15, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-104113.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105244.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123461.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-134499.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-137576.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-138663.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-138721.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54581.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54799.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58680.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-60403.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-60429.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-60680.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-60773.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-61075.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-71539.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-74101.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-79673.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-93902.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-94318.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-94513.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-94911.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-95294.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-95983.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-95988.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-97519.json
CVSS Score
Critical
10.0
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
damaged_bass_z3n
0.0.1-security.0
npm
damaged_bass_z3n
0.0.1-security.1
npm
damaged_bass_z3n
0.0.1-security
npm
damaged_bass_z3n
4.2.4
npm
distinctive-gray-dove
0.0.1-security.0
npm
distinctive-gray-dove
0.0.1-security.1
npm
distinctive-gray-dove
0.0.1-security
npm
distinctive-gray-dove
1.2.0
npm
diverse-tomato-piranha
0.0.1-security.0
npm
diverse-tomato-piranha
0.0.1-security.1
npm
diverse-tomato-piranha
0.0.1-security
npm
diverse-tomato-piranha
1.7.1
npm
evident_bird_z3n
0.0.1-security.0
npm
evident_bird_z3n
0.0.1-security.1
npm
evident_bird_z3n
0.0.1-security
npm
evident_bird_z3n
1.3.1
npm
evident_caterpillar_z3n
0.0.1-security.0
npm
evident_caterpillar_z3n
0.0.1-security.1
npm
evident_caterpillar_z3n
0.0.1-security
npm
evident_caterpillar_z3n
1.1.1
npm
extended_elk_z3n
0.0.1-security.0
npm
extended_elk_z3n
0.0.1-security.1
npm
extended_elk_z3n
0.0.1-security
npm
extended_elk_z3n
1.1.1
npm
final_sloth_z3n
0.0.1-security.0
npm
final_sloth_z3n
0.0.1-security.1
npm
final_sloth_z3n
0.0.1-security
npm
final_sloth_z3n
4.4.1
npm
fiscal-amaranth-aphid
0.0.1-security.0
npm
fiscal-amaranth-aphid
0.0.1-security.1
npm
fiscal-amaranth-aphid
0.0.1-security
npm
fiscal-amaranth-aphid
5.4.1
npm
ideal_gerbil_z3n
0.0.1-security.0
npm
ideal_gerbil_z3n
0.0.1-security.1
npm
ideal_gerbil_z3n
0.0.1-security
npm
ideal_gerbil_z3n
4.2.1
npm
indah-lepet52-ruro
0.0.1-security.0
npm
indah-lepet52-ruro
0.0.1-security.1
npm
indah-lepet52-ruro
0.0.1-security
npm
indah-lepet52-ruro
2.1.3
npm
inherent_whitefish_z3n
0.0.1-security.0
npm
inherent_whitefish_z3n
0.0.1-security.1
npm
inherent_whitefish_z3n
0.0.1-security
npm
inherent_whitefish_z3n
2.2.2
npm
iwan-sasag29-sluey
0.0.1-security.0
npm
iwan-sasag29-sluey
0.0.1-security.1
npm
iwan-sasag29-sluey
0.0.1-security
npm
iwan-sasag29-sluey
1.3.1
npm
laila-teh16-breki
0.0.1-security.0
npm
laila-teh16-breki
0.0.1-security
1-50 of 117
sonatype-2025-006640 | Components Impacted | Sonatype Guide | Sonatype Guide