# sonatype-2022-2696

## Malicious Package

Published May 4, 2022

### Security Details

**CVE ID:** sonatype-2022-2696  
**CWE:** N/A

**CVE Description:** karapace at 03 May 2022 - Malicious Package  
**CVSS Score & Severity:** 10.0 Critical  
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score:** 0%

### Malware

**KEV Status:** Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source:** Sonatype

**References:** [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)