# sonatype-2022-0706

## Malicious Package

Published Jan 31, 2022  
CVSS Score: Critical  
Score: 10.0

## Security Details
### Components Impacted

**Sonatype Research**

### sonatype-2022-0706 Security Details

**CVE ID:** sonatype-2022-0706  
**CVE Description:** [easyfuncsys, humanqueen, humanqueenn] at 29 January 2022 - Malicious Package  
**CVSS Score & Severity:** 10.0 Critical  
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score:** 0%

### Malware
#### KEV Status
Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source:** Sonatype

**References:** [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)
