Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000567

sonatype-2026-000567

NPM Security Holding Packages - Tue Feb 24 2026

Published Feb 24, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1008.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1009.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1010.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1012.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1015.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1017.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	es1int-config	0.0.1-security
npm	es1int-config	9.9.2
npm	es1int-re1ease	0.0.1-security
npm	es1int-re1ease	3.3.0
npm	express-soaps	0.0.1-security
npm	express-soaps	3.7.7
npm	json-mapping-srcs	0.0.1-security
npm	json-mapping-srcs	2.3.1
npm	modify-setting	0.0.1-security
npm	modify-setting	2.4.3
npm	ultimates-express	0.0.1-security
npm	ultimates-express	3.7.7

sonatype-2026-000567 | Components Impacted | Sonatype Guide | Sonatype Guide