sonatype-2026-003558

Malicious Packages - Wed Jun 03 2026 [Lazarus] [Dropper]

Published Jun 3, 2026

CVSS Score High

8.7

Security Details

Components Impacted

sonatype-2026-003558 Security Details

CVE ID sonatype-2026-003558
CVE Description Malicious Packages - Wed Jun 03 2026 [Lazarus] [Dropper]
Published Jun 3, 2026
CVSS Score & Severity
8.7 High
CVSS Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score 0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source Sonatype

References
help.sonatype.com THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY
OSV THIRD_PARTY