sonatype-2022-2696

Malicious Package

Published May 4, 2022

Security Details

CVE ID: sonatype-2022-2696
CWE: N/A

CVE Description: karapace at 03 May 2022 - Malicious Package
CVSS Score & Severity: 10.0 Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%

Malware

KEV Status: Not in KEV Catalog: No known exploits

Affected Ecosystems

Source: Sonatype

References: Sonatype Malware Data