# sonatype-2026-003926

Malicious Packages - Wed Jun 17 2026 [DROPPER]

Published Jun 17, 2026

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-5979.json)

CVSS ScoreHigh

8.7

## Security Details

### Components Impacted

Sonatype Research

### sonatype-2026-003926 Security Details

**CVE ID**
sonatype-2026-003926

**CVE Description**  
Malicious Packages - Wed Jun 17 2026 [DROPPER]

**Published**  
Jun 17, 2026

**CVSS Score & Severity**  
8.7 High

**CVSS Vector**  
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

**EPSS Score**  
0%

**Malware**  
malware

**KEV Status**  
Not in KEV Catalog: No known exploits

**Affected Ecosystems**  
affected

**Source**  
Sonatype

**References**  
[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) THIRD_PARTY  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2026-5979.json) THIRD_PARTY