# sonatype-2021-1696

## coa, rc - Malicious Packages November 4, 2021

Published Nov 4, 2021

- [Issue #131](https://github.com/dominictarr/rc/issues/131)
- [Issue #99](https://github.com/veged/coa/issues/99)
- [Advisory · GHSA-73qr-pfmq-6rp8](https://github.com/advisories/GHSA-73qr-pfmq-6rp8)

### CVSS Score
**Critical**  
10.0

## Security Details

### Components Impacted

#### Security Details

**CVE ID**: sonatype-2021-1696  
**CWE**: N/A  
**CVE Description**: coa, rc - Malicious Packages November 4, 2021  
**Published**: Nov 4, 2021

### CVSS Score & Severity

**10.0** Critical  
**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%

### Malware
**malware**

### KEV Status
**Not in KEV Catalog**: No known exploits

### Affected Ecosystems
**affected**

### Source
**Sonatype**

### References
- [GitHub · Issue #131](https://github.com/dominictarr/rc/issues/131) PROJECT  
- [GitHub · Issue #99](https://github.com/veged/coa/issues/99) PROJECT  
- [GitHub · Advisory · GHSA-73qr-pfmq-6rp8](https://github.com/advisories/GHSA-73qr-pfmq-6rp8) THIRD_PARTY