Skip to main content
VulnerabilityPublished Updated

Bunifu (NuGet) · Malicious Code

Affects BunifuSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:43 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetBunifupkg:nuget/BunifuOther threatsAffected
  • =1.0.48
  • =1.0.23
  • =1.0.17
  • =6.3.0
  • =1.0.43
  • =1.0.25
  • =1.0.37
  • =1.0.29
  • =1.0.3
  • =1.0.33
  • =1.0.38
  • =1.0.30
  • =1.0.34
  • =1.0.15
  • =1.0.47
  • =1.0.24
  • =1.0.20
  • =1.0.5
  • =1.0.44
  • =1.0.2
  • =1.0.16
  • =1.0.45
  • =1.0.50
  • =1.0.18
  • =1.0.8
  • =1.0.22
  • =1.0.28
  • =1.0.27
  • =1.0.35
  • =1.0.12
  • =1.0.21
  • =1.0.40
  • =1.0.36
  • =1.0.46
  • =1.0.10
  • =1.0.26
  • =1.0.42
  • =1.0.19
  • =1.0.32
  • =1.0.7
  • =1.0.41
  • =1.0.49
  • =1.0.31
  • =1.0.39
  • =1.0.4
  • =1.0.1
  • =1.0.6
  • =6.3.1
  • =1.0.9
  • =1.0.11
  • =1.0.13
  • =1.0.14
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using the affected versions of the Bunifu package and obtain the package only from trusted sources. Check the vendor or package repository for updated, clean versions or advisories.

Description

Multiple specific versions of the Bunifu NuGet package have been identified as containing malicious code. This threat involves the presence of malicious content within these package versions, which could compromise systems that incorporate them. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…