# sonatype-2024-1561

## Payload Execution Malicious Packages - Thu May 02 2024

Published May 2, 2024

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-9965.json)

**CVSS Score**: Critical

**9.8**

## Security Details

### Components Impacted

### Sonatype Research

#### sonatype-2024-1561 Security Details

**CVE ID**: sonatype-2024-1561

**CWE**: N/A

**CVE Description**: Payload Execution Malicious Packages - Thu May 02 2024

**Published**: May 2, 2024

**CVSS Score & Severity**: 9.8 Critical

**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

**EPSS Score**: 0%

### Malware

malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

affected

**Source**: Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") THIRD_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-9965.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-9965.json") THIRD_PARTY