# sonatype-2022-3546

## Malicious Packages

**Published:** Jun 16, 2022  
**CVSS Score:** Critical 10.0

## Security Details

### Components Impacted
- Sonatype Research

### sonatype-2022-3546 Security Details

**CVE ID:** sonatype-2022-3546  
**CVE Description:** [loglib-modules, pyg-modules] at 16 June 2022 - Malicious Packages  
**Published:** Jun 16, 2022  
**CVSS Score & Severity:** 10.0 Critical  
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score:** 0%

### Malware

**KEV Status:** Not in KEV Catalog: No known exploits

### Affected Ecosystems
- Sonatype

### References
- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)