# sonatype-2024-011383

## Droppers at 24 September 2024 - Malicious Package

Published: Sep 24, 2024

### Security Details

**CVE ID**: sonatype-2024-011383  
**CVE Description**: Droppers at 24 September 2024 - Malicious Package  
**Published**: Sep 24, 2024  
**CVSS Score & Severity**: 8.7 High  
**CVSS Vector**: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N  
**EPSS Score**: 0%  
**Malware**: malware

**KEV Status**: Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source**: Sonatype

### References

- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html) (PROJECT)  
- [OSV MAL-2024-9011](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-9011.json) (THIRD_PARTY)  
- [OSV MAL-2024-9012](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-9012.json) (THIRD_PARTY)  
- [OSV MAL-2024-9015](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2024-9015.json) (THIRD_PARTY)