# sonatype-2026-001357

## Malicious Packages - Tue Mar 24 2026 [Credential Info Stealer]

Published Mar 24, 2026

**CVSS Score**: High 7.1

## Security Details

### Components Impacted

#### Sonatype Research

### sonatype-2026-001357 Security Details

**CVE ID**: sonatype-2026-001357  
**CVE Description**: Malicious Packages - Tue Mar 24 2026 [Credential Info Stealer]  
**Published**: Mar 24, 2026  
**CVSS Score & Severity**: 7.1 High  
**CVSS Vector**: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N  
**EPSS Score**: 0%

### Malware

malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

affected

### Source

Sonatype

### References

- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV Vulnerability Data](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2026-2144.json)