# sonatype-2022-3360

## Published
Jun 8, 2022

## CVSS Score
**Critical**  
**10.0**

## Security Details
### Components Impacted
Sonatype Research

### sonatype-2022-3360 Security Details
**CVE ID**: sonatype-2022-3360  
**CVE Description**: 07 Jun 2022 - Malicious Packages  
**Published**: Jun 8, 2022

### CVSS Score & Severity
**10.0**: Critical

### CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

### EPSS Score
0%

### Malware
malware

### KEV Status
Not in KEV Catalog: No known exploits

### Affected Ecosystems
affected

### Source
Sonatype

### References
- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [MAL-2022-4822](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-4822.json)  
- [MAL-2022-4823](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-4823.json)  
- [MAL-2022-642](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-642.json)  
- [MAL-2022-643](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-643.json)  
- [MAL-2022-7419](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-7419.json)