# sonatype-2022-1468

secbg, secrevtwo (09 March 2022) - Malicious Packages

Published Mar 9, 2022

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)

## CVSS ScoreCritical

**10.0**

## Security Details

### Components Impacted

Sonatype Research

### sonatype-2022-1468 Security Details

**CVE ID**  sonatype-2022-1468  
**CWE** N/A  
**CVE Description**  secbg, secrevtwo (09 March 2022) - Malicious Packages  
**Published** Mar 9, 2022

### CVSS Score & Severity

**10.0** Critical

**CVSS Vector** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

**EPSS Score** 0%

### Malware

malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

affected

### Source

Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html")