# sonatype-2022-4350

## Malicious Packages (Ransomware) - Jul 28 2022

Published Jul 28, 2022

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-12338.json)

**CVSS Score**: Critical 10.0

## Security Details

### Components Impacted

**CVE ID**: sonatype-2022-4350  
**CWE**: N/A  
**CVE Description**: Malicious Packages (Ransomware) - Jul 28 2022  
**Published**: Jul 28, 2022  
**CVSS Score & Severity**: 10.0 Critical  
**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%  
**Malware**: malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source**: Sonatype

### References

- [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) THIRD_PARTY  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-12338.json) THIRD_PARTY