# sonatype-2020-0784

electorn - Malicious Package

Published Aug 27, 2020

**CVSS Score**: Critical 9.1

### Security Details

**CVE ID**: sonatype-2020-0784

**CVE Description**: electorn - Malicious Package

**Published**: Aug 27, 2020

**CVSS Score & Severity**: 9.1 Critical

**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

**EPSS Score**: 0%

**Malware**: malware

**KEV Status**: Not in KEV Catalog: No known exploits

**Affected Ecosystems**: affected

**Source**: Sonatype

### References
- [Sonatype Blog](https://blog.sonatype.com/sonatype-spots-malicious-npm-packages)  
- [Sonatype Help](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-19413.json)