sonatype-2025-000440 | Security Details | Sonatype Guide
sonatype-2025-000440
trufflevscode - Malicious Package - Tue Feb 04 2025 [Dropper]
Published Feb 5, 2025
CVSS Score: High 8.7
Security Details
Components Impacted
Sonatype Research
sonatype-2025-000440 Security Details
CVE ID: sonatype-2025-000440
CVE Description: trufflevscode - Malicious Package - Tue Feb 04 2025 [Dropper]
Published: Feb 5, 2025
CVSS Score & Severity: 8.7 High
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score: 0%
Malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems
Source: Sonatype
References
help.sonatype.com THIRD_PARTY
OSV THIRD_PARTY