# sonatype-2023-0001

torchtriton - Malicious package

Published Jan 3, 2023

[PyTorch Blog](https://pytorch.org/blog/compromised-nightly-dependency/)

**CVSS Score**: Critical

Score: **10.0**

### Security Details

**CVE ID**: sonatype-2023-0001  
**CWE**: N/A  
**CVE Description**: torchtriton - Malicious package  
**Published**: Jan 3, 2023

**CVSS Score & Severity**:  
Score: **10.0** (Critical)

**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%

### Malware

**KEV Status**: Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source**: Sonatype

### References

[PyTorch Blog](https://pytorch.org/blog/compromised-nightly-dependency/ "https://pytorch.org/blog/compromised-nightly-dependency/")