# sonatype-2022-1501

## colorsss at 11 March 2022 - Malicious Package

Published Mar 11, 2022

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2026.json)

### CVSS Score
**Critical**  
10.0

### Security Details

#### Components Impacted

Sonatype Research

### sonatype-2022-1501 Security Details

**CVE ID** sonatype-2022-1501  
**CVE Description** colorsss at 11 March 2022 - Malicious Package  
**Published** Mar 11, 2022

### CVSS Score & Severity
**10.0**Critical

**CVSS Vector** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

**EPSS Score** 0%

### Malware
**malware**

### KEV Status
Not in KEV Catalog: No known exploits

### Affected Ecosystems
**affected**

**Source** Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") THIRD_PARTY  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2026.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2026.json") THIRD_PARTY