Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007099

sonatype-2025-007099

NPM Security Holding Packages - Tue Nov 18 2025

Published Nov 18, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190516.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-190551.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	finastealer	0.0.1-security
npm	finastealer	0.30.2
npm	multi-provider-settings	0.0.1-security
npm	multi-provider-settings	4.4.6
npm	mystealer	0.0.1-security
npm	mystealer	0.30.1
npm	node-calculator-0f50	0.0.1-security
npm	node-calculator-0f50	10.9.9
npm	node-calculator-0f50	9.9.9
npm	node-calculator-36ae	0.0.1-security
npm	node-calculator-36ae	10.9.9
npm	node-calculator-36ae	11.9.9
npm	node-calculator-36ae	9.9.9
npm	node-calculator-3e62	0.0.1-security
npm	node-calculator-3e62	2.1.0
npm	node-calculator-3e62	2.2.0
npm	node-calculator-4e41	0.0.1-security
npm	node-calculator-4e41	2.1.0
npm	node-calculator-4e41	2.5.0
npm	node-calculator-4e41	2.6.0
npm	node-calculator-4e41	2.7.0
npm	pretty-jsonify	0.0.1-security
npm	pretty-jsonify	14.1.1
npm	vapark-aungpao-new	0.0.1-security
npm	vapark-aungpao-new	1.0.1

sonatype-2025-007099 | Components Impacted | Sonatype Guide | Sonatype Guide