Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007126

sonatype-2025-007126

NPM Security Holding Packages - Thu Nov 20 2025

Published Nov 20, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	com.unity.polyspatial.xr	0.0.1-security
npm	com.unity.polyspatial.xr	3.1.0
npm	crucible	0.0.0
npm	crucible	0.0.1-security
npm	crucible	0.0.1
npm	crucible	0.3.0
npm	crucible	0.3.1
npm	crucible	0.3.2
npm	crucible	0.3.3
npm	crucible	0.3.4
npm	crucible	0.3.5
npm	crucible	0.4.1
npm	hayase-extensions	0.0.1-security
npm	hayase-extensions	0.0.1
npm	hayase-extensions	0.0.2
npm	just-a-calculator	0.0.1-security
npm	just-a-calculator	1.0.1

sonatype-2025-007126 | Components Impacted | Sonatype Guide | Sonatype Guide