Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007684

sonatype-2025-007684

NPM Security Holding Packages - Tue Dec 30 2025

Published Dec 30, 2025

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	@ptest2535/artifactory-demo-ptest	0.0.1-security
npm	@ptest2535/artifactory-demo-ptest	1.0.0
npm	@ptest2535/l_woker_mal	0.0.1-security
npm	@ptest2535/l_woker_mal	1.0.0
npm	@ptest2535/l_woker_mal	1.0.1
npm	@ptest2535/test_package	0.0.1-security
npm	awsmcc	0.0.1-security
npm	awsmcc	1.0.0
npm	eb-csr	0.0.1-security
npm	eb-csr	1.0.0
npm	eb-csr	9.1.143
npm	nbugs-video	0.0.1-security
npm	nbugs-video	999.0.1
npm	react-devtools-extensions	0.0.1-security
npm	react-devtools-extensions	1.0.0
npm	react-devtools-shared	0.0.1-security
npm	react-devtools-shared	0.0.1
npm	react-devtools-shared	3.0.0
npm	react-dom-bindings	0.0.1-security
npm	react-dom-bindings	1.0.0
npm	rt-interactive-card-collection	0.0.1-security
npm	rt-interactive-card-collection	1.0.0
npm	rt-text-media-collection	0.0.1-security
npm	rt-text-media-collection	1.0.0
npm	shop-minis-docs	0.0.1-security
npm	shop-minis-docs	1.0.0
npm	shopify-app-react-router	0.0.1-security
npm	shopify-app-react-router	1.0.0

sonatype-2025-007684 | Components Impacted | Sonatype Guide | Sonatype Guide