Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000375

sonatype-2026-000375

NPM Security Holding Packages - Mon Feb 09 2026

Published Feb 9, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-819.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-820.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-821.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-822.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	json-mapping-sources	0.0.1-security
npm	json-mapping-sources	2.4.3
npm	json-mapping-sources	2.4.5
npm	json-mapping-sources	2.4.7
npm	json-web-sources	0.0.1-security
npm	json-web-sources	2.4.5
npm	jwtdotenv	0.0.1-security
npm	jwtdotenv	7.2.7
npm	react-svg-handler	0.0.1-security
npm	react-svg-handler	1.0.0
npm	react-svg-handler	1.0.1
npm	react-svg-handler	1.0.2
npm	react-svg-handler	1.0.3

sonatype-2026-000375 | Components Impacted | Sonatype Guide | Sonatype Guide