# sonatype-2023-3913

Malicious Packages - Wed Sep 06 2023

Published Sep 7, 2023

## Security Details

### CVE ID
sonatype-2023-3913

### CWE
N/A

### CVE Description
Malicious Packages - Wed Sep 06 2023

### Published
Sep 7, 2023

### CVSS Score & Severity

**10.0** Critical

### CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

### EPSS Score
0%

### Malware
malware

### KEV Status
Not in KEV Catalog: No known exploits

### Affected Ecosystems
affected

### Source
Sonatype

### References
- [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") PROJECT
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2047.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2047.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2319.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2319.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2321.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2321.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2433.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2433.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2442.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2442.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2586.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2586.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2587.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2587.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2588.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2588.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2696.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2696.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2826.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2826.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2852.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2852.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2853.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2853.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2866.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2866.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2905.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-2905.json") THIRD_PARTY
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-3826.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-3826.json") THIRD_PARTY