Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000295

sonatype-2026-000295

Potentially Unwanted Applications - Tue Feb 03 2026 [PUA]

Published Feb 3, 2026

https://help.sonatype.com/en/sonatype-malware-data.html

CVSS ScoreNone

0.0

Ecosystem	Package	Version


npm	bis-schemas	0.0.1-security
npm	bis-schemas	9.99.9
npm	cesium-native	0.0.1-security
npm	cesium-native	0.56.0
npm	css-workshop	0.0.1-security
npm	css-workshop	0.1.0
npm	dep-graph-gen	0.0.1-security
npm	dep-graph-gen	1.0.0
npm	semaphore-relayer	1.0.0
npm	semaphore-relayer-zee	1.0.0
npm	snowbridge-ui	0.0.1-security
npm	snowbridge-ui	1.0.0
npm	twofactor_webauthn	0.0.1-security
npm	twofactor_webauthn	2.6.0-dev.0
npm	user_migration	0.0.1-security
npm	user_migration	9.99.9
npm	wp-job-manager	0.0.1-security
npm	wp-job-manager	2.4.0

sonatype-2026-000295 | Components Impacted | Sonatype Guide | Sonatype Guide