Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007298

sonatype-2025-007298

NPM Security Holding Packages - Thu Nov 27 2025

Published Nov 27, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	bitcoin-lib-js	0.0.1-security
npm	bitcoin-lib-js	7.2.1
npm	bitcoin-main-lib	0.0.1-security
npm	bitcoin-main-lib	7.0.0
npm	bitcoin-main-lib	7.0.1
npm	bitcoin-main-lib	7.0.2
npm	bitcoin-main-lib	7.0.3
npm	bitcoin-main-lib	7.0.5
npm	bitcoin-main-lib	7.0.6
npm	bitcoin-main-lib	7.0.7
npm	bitcoin-main-lib	7.0.8
npm	bitcoin-main-lib	7.0.9
npm	bitcoin-main-lib	7.1.0
npm	bitcoin-main-lib	7.1.1
npm	bitcoin-main-lib	7.1.2
npm	bitcoin-main-lib	7.1.3
npm	bitcoin-main-lib	7.1.4
npm	bitcoin-main-lib	7.1.5
npm	bitcoin-main-lib	7.1.6
npm	bitcoin-main-lib	7.1.7
npm	bitcoin-main-lib	7.1.8
npm	bitcoin-main-lib	7.1.9
npm	bitcoin-main-lib	7.2.0
npm	undelete	1.2.0

sonatype-2025-007298 | Components Impacted | Sonatype Guide | Sonatype Guide