# sonatype-2025-000042

Malicious Packages - Mon Jan 06 2025 [Dropper]

Published Jan 6, 2025

CVSS Score High 8.7

## Security Details

### Components Impacted

### Sonatype Research

#### sonatype-2025-000042 Security Details

**CVE ID** sonatype-2025-000042  
**CVE Description** Malicious Packages - Mon Jan 06 2025 [Dropper]  
**Published** Jan 6, 2025  
**CVSS Score & Severity** 8.7 High  
**CVSS Vector** CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N  
**EPSS Score** 0%  
**Malware** malware  
**KEV Status** Not in KEV Catalog: No known exploits  
**Affected Ecosystems** affected  
**Source** Sonatype

### References
[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) THIRD_PARTY