# sonatype-2022-1143

## Malicious Packages at 28 February 2022

**Published**: Feb 28, 2022  
**CVSS Score**: Critical 10.0

## Security Details

### Components Impacted

- **CVE ID**: sonatype-2022-1143  
- **CWE**: N/A  
- **CVE Description**: Malicious Packages at 28 February 2022  
- **Published**: Feb 28, 2022  
- **CVSS Score & Severity**: 10.0 Critical  
- **CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
- **EPSS Score**: 0%  
- **Malware**: malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

- **Source**: Sonatype  
- **References**: [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)