Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007573

sonatype-2025-007573

NPM Security Holding Packages - Tue Dec 16 2025

Published Dec 16, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192580.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192582.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192583.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192587.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192588.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192600.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	elf-stats-aurora-cocoa-911	0.0.1-security
npm	elf-stats-aurora-cocoa-911	1.0.0
npm	elf-stats-fuzzy-wreath-278	0.0.1-security
npm	elf-stats-fuzzy-wreath-278	1.0.0
npm	elf-stats-fuzzy-wreath-278	1.0.1
npm	sds-auth-ui	0.0.1-security
npm	sds-auth-ui	0.0.1
npm	sds-swissid-common	0.0.1-security
npm	sds-swissid-common	0.0.1
npm	swissid-common	0.0.1-security
npm	swissid-common	0.0.1
npm	swissid-common	1.0.0
npm	swissid-common	99.0.0
npm	tailwind-variables	0.0.1-security
npm	tailwind-variables	2.3.1
npm	tailwind-variables	2.3.2

sonatype-2025-007573 | Components Impacted | Sonatype Guide | Sonatype Guide