sonatype-2025-000042

Malicious Packages - Mon Jan 06 2025 [Dropper]

Published Jan 6, 2025

CVSS Score High 8.7

Security Details

Components Impacted

Sonatype Research

sonatype-2025-000042 Security Details

CVE ID sonatype-2025-000042
CVE Description Malicious Packages - Mon Jan 06 2025 [Dropper]
Published Jan 6, 2025
CVSS Score & Severity 8.7 High
CVSS Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score 0%
Malware malware
KEV Status Not in KEV Catalog: No known exploits
Affected Ecosystems affected
Source Sonatype

References

help.sonatype.com THIRD_PARTY