# sonatype-2022-1140

ea-factories by balook at 26 February 2022

Published Feb 28, 2022

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2644.json)

CVSS Score: Critical

**10.0**

## Security Details

### Components Impacted

**Sonatype Research**

### sonatype-2022-1140 Security Details

**CVE ID:** sonatype-2022-1140

**CWE:** N/A

**CVE Description:** ea-factories by balook at 26 February 2022

**Published:** Feb 28, 2022

**CVSS Score & Severity:**

**10.0 Critical**

**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

**EPSS Score:** 0%

### Malware

**Malware**

### KEV Status

**Not in KEV Catalog:** No known exploits

### Affected Ecosystems

**Affected**

**Source:** Sonatype

### References

- [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) THIRD_PARTY  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2644.json) THIRD_PARTY