Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000117

sonatype-2026-000117

NPM Security Holding Packages - Tue Jan 13 2026

Published Jan 13, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	1ust	0.0.0-security
npm	onlypuppy	0.0.0-security
npm	onlypuppy7	0.0.0-security
npm	puppyperpetual	0.0.0-security
npm	puppyperpetual	0.0.1-security
npm	puppyperpetual	1.0.0
npm	puppyperpetual	1.0.1
npm	puppyperpetual	1.0.2
npm	puppyperpetual	1.0.3
npm	puppyperpetual	1.0.4
npm	puppyperpetual	1.0.5
npm	puppyperpetual	1.0.6
npm	puppyperpetual	1.1.0
npm	puppyperpetual	1.1.1
npm	puppyperpetual	1.1.2
npm	puppyperpetual	1.1.3
npm	puppyperpetual	1.1.4
npm	puppyperpetual	1.1.5
npm	puppyperpetual	1.2.0
npm	puppyperpetual	1.2.1
npm	puppyperpetual	1.2.2
npm	puppyperpetual	1.2.3
npm	puppyperpetual	1.2.4
npm	puppyperpetual	1.2.5
npm	puppyperpetual	1.2.6
npm	puppyperpetual	1.2.7
npm	puppyproxy	0.0.0-security
npm	puppyproxy	1.0.0
npm	puppyproxy	1.0.1
npm	puppyproxy	1.0.2
npm	puppyproxy	1.1.0
npm	puppyproxy	1.1.1
npm	puppyproxy	1.1.2
npm	puppyproxy	1.1.3
npm	puppyproxy	1.1.4
npm	puppyproxy	1.1.5
npm	puppyproxy	1.1.6
npm	puppyproxy	1.1.7
npm	puppyproxy	1.1.8
npm	puppyproxy	1.1.9

sonatype-2026-000117 | Components Impacted | Sonatype Guide | Sonatype Guide