# sonatype-2021-1473

**okhsa - Potentially Malicious Package (13 October 2021)**  
**Published**: Oct 13, 2021  
**CVSS Score**: Critical  
**10.0**

## Security Details

### Components Impacted

- Sonatype Research

### sonatype-2021-1473 Security Details

- **CVE ID**: sonatype-2021-1473  
- **CWE**: N/A  
- **CVE Description**: okhsa - Potentially Malicious Package (13 October 2021)  
- **Published**: Oct 13, 2021  
- **CVSS Score & Severity**: 10.0 Critical  
- **CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
- **EPSS Score**: 0%

### Malware

- **KEV Status**: Not in KEV Catalog: No known exploits  
- **Affected Ecosystems**: affected  
- **Source**: Sonatype

### References

- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-5052.json)