# sonatype-2022-2601

**colors-help, colors_express, colors-helper at 30 April 2022 - Discord Token Stealers**  
**Published:** May 2, 2022

## Security Details

**CVE ID:** sonatype-2022-2601  
**CVE Description:** colors-help, colors_express, colors-helper at 30 April 2022 - Discord Token Stealers  
**CVSS Score:** 10.0 Critical  
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score:** 0%  
**Malware:** malware  
**KEV Status:** Not in KEV Catalog: No known exploits

## Affected Ecosystems

**Source:** Sonatype

## References

- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") PROJECT  
- [OSV - MAL-2022-2015](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2015.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2015.json") THIRD_PARTY  
- [OSV - MAL-2022-2016](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2016.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2016.json") THIRD_PARTY  
- [OSV - MAL-2022-2022](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2022.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2022.json") THIRD_PARTY