Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007636

sonatype-2025-007636

NPM Security Holding Packages - Tue Dec 23 2025

Published Dec 23, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	@google_recaptcha/js	0.0.1-security
npm	@google_recaptcha/js	1.0.0
npm	excluder-mcp	0.0.1-security
npm	excluder-mcp	1.0.0
npm	excluder-mcp	1.0.4
npm	excluder-mcp	1.0.5
npm	excluder-mcp	1.0.6
npm	qxytest	0.0.1-security
npm	qxytest	1.0.0
npm	qxytest1	0.0.1-security
npm	qxytest1	1.0.0
npm	qxytest1	1.0.1
npm	qxytest1	1.0.2
npm	qxytest1	1.0.4
npm	start-log-backend	0.0.1-security
npm	start-log-backend	1.0.0
npm	trial-guard	0.0.1-security
npm	trial-guard	1.0.0
npm	trial-guard	1.0.1

sonatype-2025-007636 | Components Impacted | Sonatype Guide | Sonatype Guide