Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000037

sonatype-2026-000037

NPM Security Holding Packages - Wed Jan 07 2026

Published Jan 7, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-100.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-102.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-71.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	eslint-plugin-supertest	0.0.1-security
npm	eslint-plugin-supertest	5.4.1
npm	houdini-react-win32-x64	0.0.1-security
npm	houdini-react-win32-x64	2.0.0-go.11
npm	redis-cookie-ts	0.0.1-security
npm	redis-cookie-ts	2.1.1
npm	redis-request-parser	0.0.1-security
npm	redis-request-parser	1.2.6

sonatype-2026-000037 | Components Impacted | Sonatype Guide | Sonatype Guide