Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
sonatype-2025-007197
sonatype-2025-007197
NPM Security Holding Packages - Mon Nov 24 2025
Published Nov 24, 2025
https://help.sonatype.com/en/sonatype-malware-data.html
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-100099.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-100656.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101043.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101861.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102095.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102422.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102425.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-103324.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-103826.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-103941.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105670.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105843.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105911.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-106373.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-106790.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-107094.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-107690.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-108521.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109433.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109603.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109704.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-110194.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-110453.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-110812.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-111030.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-111115.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-111270.json
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-99089.json
CVSS Score
Critical
10.0
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
accurate_piranha-smiletea
0.0.1-security.0
npm
accurate_piranha-smiletea
0.0.1-security.1
npm
accurate_piranha-smiletea
0.0.1-security
npm
accurate_piranha-smiletea
2.2.1
npm
adorable_dinosaur-notthedev
0.0.1-security.0
npm
adorable_dinosaur-notthedev
0.0.1-security.1
npm
adorable_dinosaur-notthedev
0.0.1-security
npm
adorable_dinosaur-notthedev
2.3.1
npm
awkward_nightingale-notthedev
0.0.1-security.0
npm
awkward_nightingale-notthedev
0.0.1-security.1
npm
awkward_nightingale-notthedev
0.0.1-security
npm
awkward_nightingale-notthedev
1.2.1
npm
brief_firefly-smiletea
0.0.1-security.0
npm
brief_firefly-smiletea
0.0.1-security.1
npm
brief_firefly-smiletea
0.0.1-security
npm
brief_firefly-smiletea
4.4.2
npm
collective_earwig-notthedev
0.0.1-security.0
npm
collective_earwig-notthedev
0.0.1-security.1
npm
collective_earwig-notthedev
0.0.1-security
npm
collective_earwig-notthedev
3.3.4
npm
courageous_spider-notthedev
0.0.1-security.0
npm
courageous_spider-notthedev
0.0.1-security.1
npm
courageous_spider-notthedev
0.0.1-security
npm
courageous_spider-notthedev
3.2.2
npm
easy_carp-notthedev
0.0.1-security.0
npm
easy_carp-notthedev
0.0.1-security.1
npm
easy_carp-notthedev
0.0.1-security
npm
easy_carp-notthedev
2.4.1
npm
endless_squirrel-notthedev
0.0.1-security.0
npm
endless_squirrel-notthedev
0.0.1-security.1
npm
endless_squirrel-notthedev
0.0.1-security
npm
endless_squirrel-notthedev
3.2.1
npm
external_parrot-notthedev
0.0.1-security.0
npm
external_parrot-notthedev
0.0.1-security.1
npm
external_parrot-notthedev
0.0.1-security
npm
external_parrot-notthedev
2.2.3
npm
extra_cricket-notthedev
0.0.1-security.0
npm
extra_cricket-notthedev
0.0.1-security.1
npm
extra_cricket-notthedev
0.0.1-security
npm
extra_cricket-notthedev
1.3.2
npm
graceful_cephalopod-notthedev
0.0.1-security.0
npm
graceful_cephalopod-notthedev
0.0.1-security.1
npm
graceful_cephalopod-notthedev
0.0.1-security
npm
graceful_cephalopod-notthedev
1.1.3
npm
huge_asp-notthedev
0.0.1-security.0
npm
huge_asp-notthedev
0.0.1-security.1
npm
huge_asp-notthedev
0.0.1-security
npm
huge_asp-notthedev
3.3.2
npm
ideological_wolverine-notthedev
0.0.1-security.0
npm
ideological_wolverine-notthedev
0.0.1-security.1
1-50 of 120
sonatype-2025-007197 | Components Impacted | Sonatype Guide | Sonatype Guide