# sonatype-2021-1472

## Malicious Package (12 October 2021)

**Published:** Oct 13, 2021  
**CVSS Score:** Critical  
**Score Value:** 10.0

## Security Details

### Components Impacted

**CVE ID:** sonatype-2021-1472  
**CWE:** N/A  
**CVE Description:** Malicious Package (12 October 2021)  
**Published:** Oct 13, 2021

### CVSS Score & Severity

**Score:** 10.0  
**Severity:** Critical  
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

### EPSS Score

0%

### Malware

malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

affected

### Source

**Source:** Sonatype

### References

- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)
- [OSV MAL-2022-1694](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-1694.json)
- [OSV MAL-2022-1904](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-1904.json)
- [OSV MAL-2022-4191](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-4191.json)
- [OSV MAL-2022-4192](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-4192.json)