# sonatype-2026-003200

## Malicious Packages - Tue May 19 2026

Published May 19, 2026

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)

## CVSS Score

**Critical**  
**9.3**

## Security Details

### Components Impacted

#### Sonatype Research

### sonatype-2026-003200 Security Details

**CVE ID**: sonatype-2026-003200  
**CVE Description**: Malicious Packages - Tue May 19 2026  
**Published**: May 19, 2026

### CVSS Score & Severity

**Score**: 9.3  
**Severity**: Critical  
**CVSS Vector**: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:H/SA:N  
**EPSS Score**: 0%

### Malware  
malware

### KEV Status

**Not in KEV Catalog**: No known exploits

### Affected Ecosystems

**Source**: Sonatype

### References

- [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-3846.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-3847.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-3848.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-3849.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-3862.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4126.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4127.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4128.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4129.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4130.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4132.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4134.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4135.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4136.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4137.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4138.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4140.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4141.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4142.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4143.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4144.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4145.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4146.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4147.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4148.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4149.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4150.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4151.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4152.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4153.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4154.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4155.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4156.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4157.json)  
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-4158.json)