# sonatype-2020-0774

## fallguys - Embedded Malicious Code

**Published:** Aug 26, 2020  
**CVSS Score:** Critical  
**Score Value:** 10.0

### Security Details
#### Components Impacted

**CVE ID:** sonatype-2020-0774  
**CVE Description:** fallguys - Embedded Malicious Code  
**Published:** Aug 26, 2020

**CVSS Score & Severity**  
- Score: 10.0  
- Severity: Critical

**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score:** 0%

### Malware
- Status: Not in KEV Catalog: No known exploits

### Affected Ecosystems

#### Source
- Sonatype

### References
- [Sonatype Blog](https://blog.sonatype.com/inside-the-fallguys-malware)
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-20210.json)
- [npmjs.com](https://www.npmjs.com/advisories/1552)