Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000326

sonatype-2026-000326

NPM Security Holding Packages - Thu Feb 05 2026

Published Feb 5, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-749.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-754.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-758.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	@purecore/rabbitmq	0.0.1-security
npm	blunderbus	0.0.1-security.0
npm	blunderbus	0.0.1-security.1
npm	blunderbus	0.0.1-security
npm	blunderbus	0.0.1
npm	blunderbus	0.0.2
npm	chunkr	0.0.1-security.0
npm	chunkr	0.0.1-security.1
npm	chunkr	0.0.1-security
npm	chunkr	1.0.0
npm	chunkr	1.0.1
npm	chunkr	1.0.2
npm	chunkr	1.0.3
npm	rabbitmq-sdk	0.0.1-security
npm	rabbitmq-sdk	0.1.0
npm	rabbitmq-sdk	1.2.0
npm	tailwindcss-animation-modern	0.0.1-security
npm	tailwindcss-animation-modern	2.3.0
npm	tailwindcss-forms-starter	0.0.1-security
npm	tailwindcss-forms-starter	1.3.2
npm	yesmeandyou	0.0.1-security
npm	yesmeandyou	1.0.0

sonatype-2026-000326 | Components Impacted | Sonatype Guide | Sonatype Guide