# sonatype-2022-2374

## Distutil at April 21 - Malicious Package

**Published:** Apr 21, 2022  
**CVSS Score:** Critical  
**10.0**

### Security Details

**CVE ID:** sonatype-2022-2374  
**CWE:** N/A  
**CVE Description:** Distutil at April 21 - Malicious Package  
**Published:** Apr 21, 2022

**CVSS Score & Severity**  
**10.0** Critical

**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H  
**EPSS Score:** 0%

**Malware:** malware

**KEV Status:** Not in KEV Catalog: No known exploits

**Affected Ecosystems:** affected

**Source:** Sonatype

**References:** [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)