Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000099

sonatype-2026-000099

NPM Security Holding Packages - Mon Jan 12 2026

Published Jan 12, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-208.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-211.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-217.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-219.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-222.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-231.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	@gwp-gtmt-components/event-listener	0.0.1-security
npm	@gwp-gtmt-components/event-listener	77.7.7
npm	@gwp-gtmt-components/event-listener	88.8.8
npm	@workleap-widgets/client	0.0.1-security
npm	@workleap-widgets/client	100.0.0
npm	@workleap-widgets/client	100.1.1
npm	@workleap-widgets/client	77.7.7
npm	@workleap-widgets/client	88.8.8
npm	@workleap-widgets/client	99.9.9
npm	experimental-utils	0.0.1-security
npm	experimental-utils	1.0.1
npm	experimental-utils	8.0.11
npm	experimental-utils	99.10.9
npm	firestore-types	0.0.1-security
npm	firestore-types	1.0.1
npm	firestore-types	8.0.11
npm	huggingface-js	0.0.1-security
npm	huggingface-js	1.0.1
npm	pinecone-js	0.0.1-security
npm	pinecone-js	1.0.0
npm	pinecone-js	1.0.1

sonatype-2026-000099 | Components Impacted | Sonatype Guide | Sonatype Guide