Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000644

sonatype-2026-000644

NPM Security Holding Packages - Mon Mar 02 2026

Published Mar 2, 2026

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1109.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1115.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-1116.json

CVSS ScoreCritical

10.0

Ecosystem	Package	Version


npm	aave_dashboard	0.0.1-security
npm	aave_dashboard	0.1.0
npm	archgate-win32-x64	0.0.1-security
npm	archgate-win32-x64	0.8.2
npm	archgate-win32-x64	0.9.0
npm	archgate-win32-x64	0.9.1
npm	catapult_base	0.0.1-security
npm	catapult_base	1.0.0
npm	chai-vest	0.0.1-security
npm	chai-vest	1.1.9
npm	derivcrypto	0.0.1-security
npm	derivcrypto	0.0.1
npm	henrybot	0.0.1-security
npm	henrybot	1.0.0
npm	hn.svelte.dev	0.0.0
npm	hn.svelte.dev	0.0.1-security
npm	hn.svelte.dev	0.0.1
npm	hn.svelte.dev	0.0.2
npm	hn.svelte.dev	0.0.3
npm	js-nodecat	0.0.1-security
npm	js-nodecat	1.0.7
npm	jsnwebapptoken	0.0.1-security
npm	jsnwebapptoken	8.40.2
npm	mephisto-addons	0.0.1-security
npm	mephisto-addons	2.1.1
npm	mobile-sdk-react-native	0.0.1-security
npm	mobile-sdk-react-native	2.1.1
npm	partnershub	0.0.0
npm	partnershub	0.0.1-security
npm	spacecat-shared-utils	0.0.1-security
npm	spacecat-shared-utils	2.1.1
npm	verceltemplateblogstudio	0.0.1-security
npm	verceltemplateblogstudio	1.0.0
npm	windowsign	0.0.1-security
npm	windowsign	0.0.1

sonatype-2026-000644 | Components Impacted | Sonatype Guide | Sonatype Guide