Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000325

sonatype-2026-000325

NPM Security Holding Packages - Wed Feb 04 2026

Published Feb 4, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-742.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	dcf-commons	0.0.1-security
npm	dcf-commons	1.0.0
npm	dcf-commons	1.0.1
npm	dcf-commons	1.0.2
npm	dcf-commons	1.0.3
npm	dcf-commons	1.0.4
npm	dcf-commons	1.0.5
npm	dcf-commons	1.0.6
npm	dcf-commons	1.0.7
npm	dcf-commons	1.0.8
npm	dcf-commons	1.0.9
npm	dcf-commons	1.1.0
npm	dcf-commons	1.1.1
npm	dcf-commons	1.1.2
npm	dcf-commons	1.1.3
npm	dcf-commons	1.1.4
npm	dcf-commons	1.1.5

sonatype-2026-000325 | Components Impacted | Sonatype Guide