# sonatype-2022-2769

## Malicious Packages

Published May 9, 2022

### CVSS Score
Critical

**CVSS Score:** 10.0

### Security Details

#### Components Impacted

- **CVE ID:** sonatype-2022-2769
- **CWE:** N/A
- **CVE Description:** dubrusk at May 9 - Malicious Packages
- **Published:** May 9, 2022

### CVSS Score & Severity

- **Score:** 10.0
- **Severity:** Critical
- **CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- **EPSS Score:** 0%

### Malware

- **KEV Status:** Not in KEV Catalog: No known exploits

### Affected Ecosystems

- **Source:** Sonatype

### References

- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)
- [OSV MAL-2022-2018](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2018.json)
- [OSV MAL-2022-2020](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-2020.json)
- [OSV MAL-2022-6360](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-6360.json)
- [OSV MAL-2022-6388](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-6388.json)
- [OSV MAL-2022-6587](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-6587.json)