# sonatype-2022-1497

**Published**: Mar 11, 2022  
**CVSS Score**: Critical  
**Score**: 10.0

### Security Details

**CVE ID**: sonatype-2022-1497  
**CVE Description**: colors2.0 at 11 March 2022 - Malicious Package  
**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%

### Components Impacted

#### Sonatype Research

**KEV Status**: Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source**: Sonatype

### References
- [Help Sonatype](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2021.json)