Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007603

sonatype-2025-007603

NPM Security Holding Packages - Wed Dec 17 2025

Published Dec 19, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192441.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192443.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192444.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192445.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-192448.json

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


npm	adk-github	0.0.1-security
npm	adk-github	1.0.0
npm	adk-github	1.0.1
npm	awkit-js-win32-x64-msvc	0.0.1-security
npm	diffai-js-win32-x64-msvc	0.0.1-security
npm	diffx-js-win32-x64-msvc	0.0.1-security
npm	elf-stats-cosy-garland-592	0.0.1-security
npm	elf-stats-cosy-garland-592	1.0.0
npm	elf-stats-jolly-hammer-980	0.0.1-security
npm	elf-stats-jolly-hammer-980	1.0.0
npm	elf-stats-merry-icicle-449	0.0.1-security
npm	elf-stats-merry-icicle-449	1.0.0
npm	elf-stats-silvered-mailbag-755	0.0.1-security
npm	elf-stats-silvered-mailbag-755	1.0.0
npm	elf-stats-sparkly-snowglobe-243	0.0.1-security
npm	elf-stats-sparkly-snowglobe-243	1.0.0
npm	elf-stats-sugarplum-fir-770	0.0.1-security
npm	elf-stats-sugarplum-fir-770	1.0.0
npm	qwqwqw	0.0.1-security
npm	qwqwqw	1.0.1
npm	tailwind-logic	0.0.1-security
npm	tailwind-logic	3.1.0
npm	viktor-xml-parser	0.0.1-security
npm	viktor-xml-parser	1.0.0
npm	viktorparserctf	0.0.1-security
npm	viktorparserctf	0.30.1
npm	viktorparserctf	0.30.2
npm	viktorparserctf	1.0.0
npm	viktorparserctf6	0.0.1-security
npm	viktorparserctf6	0.30.1
npm	viktorparserctf6	0.30.2
npm	yt-smm	0.0.1-security
npm	yt-smm	1.0.0

sonatype-2025-007603 | Components Impacted | Sonatype Guide | Sonatype Guide