# sonatype-2023-3911

Malicious Packages - Wed Sep 06 2023

Published Sep 6, 2023

### CVSS Score
**Critical**  
10.0

## Security Details
### Components Impacted
Sonatype Research

### sonatype-2023-3911 Security Details
**CVE ID**: sonatype-2023-3911  
**CVE Description**: Malicious Packages - Wed Sep 06 2023  
**Published**: Sep 7, 2023  
**CVSS Score & Severity**: 10.0 Critical  
**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%

### Malware
malware  
**KEV Status**: Not in KEV Catalog: No known exploits

### Affected Ecosystems
Source: Sonatype

### References  
- [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV - MAL-2023-8189](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8189.json)  
- [OSV - MAL-2023-8190](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8190.json)  
- [OSV - MAL-2023-8191](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8191.json)  
- [OSV - MAL-2023-8192](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8192.json)  
- [OSV - MAL-2023-8193](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8193.json)  
- [OSV - MAL-2023-8194](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8194.json)  
- [OSV - MAL-2023-8195](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8195.json)  
- [OSV - MAL-2023-8196](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8196.json)  
- [OSV - MAL-2023-8197](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8197.json)  
- [OSV - MAL-2023-8198](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8198.json)  
- [OSV - MAL-2023-8199](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8199.json)  
- [OSV - MAL-2023-8200](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8200.json)  
- [OSV - MAL-2023-8201](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8201.json)  
- [OSV - MAL-2023-8202](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8202.json)  
- [OSV - MAL-2023-8203](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8203.json)  
- [OSV - MAL-2023-8204](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8204.json)  
- [OSV - MAL-2023-8205](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8205.json)  
- [OSV - MAL-2023-8206](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8206.json)  
- [OSV - MAL-2023-8207](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8207.json)  
- [OSV - MAL-2023-8208](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8208.json)  
- [OSV - MAL-2023-8209](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8209.json)  
- [OSV - MAL-2023-8210](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8210.json)  
- [OSV - MAL-2023-8211](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8211.json)  
- [OSV - MAL-2023-8212](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2023-8212.json)  
- [OSV - MAL-2024-1767](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-1767.json)