# sonatype-2022-1504

## Malicious Package

Published Mar 11, 2022

**CVSS Score**: Critical 10.0

## Security Details

### Components Impacted

**CVE ID**: sonatype-2022-1504  
**CVE Description**: grabbir at 11 March 2022 - Malicious Package  
**Published**: Mar 11, 2022

### CVSS Score & Severity

- **Score**: 10.0 Critical  
- **CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

**EPSS Score**: 0%

### Malware

Malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

Affected

### Source

Sonatype

### References

- [Sonatype Help](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-3436.json)