# sonatype-2021-0722

## Malicious Packages - 21 Jun 2021

**Published**: Jun 20, 2021  
**CVSS Score**: Critical  
**Score**: 10.0

### Security Details

#### Components Impacted

- maratlib  
- maratlib1  
- mllearnlib  
- mplatlib

#### CVE ID  
sonatype-2021-0722

#### CVE Description  
maratlib, maratlib1, mllearnlib, mplatlib - Malicious Packages - 21 Jun 2021

**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%

### Malware  
malware

### KEV Status  
Not in KEV Catalog: No known exploits

### Affected Ecosystems  
affected

### Source  
Sonatype

### References  
[Sonatype Blog](https://blog.sonatype.com/open-source-attacks-on-the-rise-top-8-malicious-packages-found-in-npm "https://blog.sonatype.com/open-source-attacks-on-the-rise-top-8-malicious-packages-found-in-npm")
