Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007278

sonatype-2025-007278

NPM Security Holding Packages - Wed Nov 26 2025

Published Nov 26, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	chai-jsons	0.0.1-security
npm	chai-jsons	3.3.7
npm	chai-jsons	3.3.8
npm	web-code-test-server	0.0.1-security
npm	web-code-test-server	0.0.1
npm	workvivo-backend	0.0.1-security
npm	workvivo-backend	0.0.1
npm	workvivo-components	0.0.1-security
npm	workvivo-components	0.0.1
npm	workvivo-internal	0.0.1-security
npm	workvivo-internal	0.0.1
npm	workvivo-js	0.0.1-security
npm	workvivo-js	0.0.1
npm	workvivo-utils	0.0.1-security
npm	workvivo-utils	0.0.1

sonatype-2025-007278 | Components Impacted | Sonatype Guide | Sonatype Guide