# sonatype-2022-2481

## Shell Backdoor Packages at 26/27 April 2022 - Malicious Packages

**Published** Apr 27, 2022  
**CVSS Score** Critical  
**Score** 10.0

## Security Details

### Components Impacted

#### Sonatype Research

### sonatype-2022-2481 Security Details

**CVE ID** sonatype-2022-2481  
**CVE Description** Shell Backdoor Packages at 26/27 April 2022 - Malicious Packages  
**Published** Apr 27, 2022  
**CVSS Score & Severity** 10.0 Critical  
**CVSS Vector** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score** 0%

### Malware

**KEV Status** Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source** Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)