# sonatype-2026-003808

Malicious Packages - Fri Jun 12 2026 \[DROPPER\]

Published Jun 12, 2026

**CVSS Score**: High 8.7

## Security Details

### Components Impacted

- Sonatype Research

### sonatype-2026-003808 Security Details

- **CVE ID**: sonatype-2026-003808
- **CVE Description**: Malicious Packages - Fri Jun 12 2026 \[DROPPER\]
- **Published**: Jun 12, 2026
- **CVSS Score & Severity**: 8.7 High
- **CVSS Vector**: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- **EPSS Score**: 0%
- **Malware**: malware
- **KEV Status**: Not in KEV Catalog: No known exploits
- **Affected Ecosystems**: affected
- **Source**: Sonatype

## References

- [Sonatype Help](https://help.sonatype.com/en/sonatype-malware-data.html)
- [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-5912.json)