# sonatype-2022-3475

**Published:** Jun 13, 2022  
**CVE ID:** sonatype-2022-3475  
**CVE Description:** pypi packages at 13 June 2022 - Malicious Packages  
**CVSS Score & Severity:** 10.0 Critical  
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score:** 0%

## Security Details

**Components Impacted:**  
Sonatype Research

**KEV Status:**  
Not in KEV Catalog: No known exploits

**Affected Ecosystems:**  
Source: Sonatype

## References
[Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)
