Skip to main content
MalwarePublished Updated

binance.csharp (NuGet) · Malicious Code

Affects binance.csharpSource GCVE Database

0

Malicious package : remove binance.csharp and rotate any secrets on hosts that installed it.

Data as of 20 Jul 2026, 20:33 UTC

Classification

Malicious package

Published to NuGet · OSV MAL-2025-191604

What to do

Remove binance.csharp from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
NuGetbinance.csharppkg:nuget/binance.csharpOther threatsAffected
  • =1.1.35
  • =1.56.7
  • =1.56.8
  • =1.56.9
  • =1.56.10
  • =1.56.11
  • =1.56.12
  • =1.56.13
  • =1.56.14
  • =1.56.15
  • =1.56.16
  • =1.56.17
  • =1.56.18
  • =1.56.19
  • =1.56.20
  • =1.56.21
  • =1.56.22
  • =1.56.23
  • =1.56.24
  • =1.56.25
  • =1.56.26
  • =1.56.27
  • =1.56.28
  • =1.56.29
  • =1.56.30
  • =1.56.31
  • =1.56.32
  • =1.56.33
  • =1.56.34
  • =1.56.35
  • =1.56.36
  • =1.56.37
  • =1.56.38
  • =1.56.39
  • =1.56.40
  • =1.56.41
  • =1.56.42
  • =1.56.43
  • =1.56.44
  • =1.56.45
  • =1.56.46
  • =1.56.47
  • =4.1.35
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The binance.csharp NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions. The affected versions include a wide range of releases identified explicitly by version number.

References

Community reviews

Loading reviews…