Skip to main content
MalwarePublished Updated

DiscordNetApi (NuGet) · Malicious Code

Affects DiscordNetApiSource GCVE Database

0

Malicious package : remove DiscordNetApi and rotate any secrets on hosts that installed it.

Data as of 20 Jul 2026, 20:46 UTC

Classification

Malicious package

Published to NuGet · OSV MAL-2024-11507

What to do

Remove DiscordNetApi from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
NuGetDiscordNetApipkg:nuget/DiscordNetApiOther threatsAffected
  • 1.0.0 – 1.2.567
51 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The DiscordNetApi NuGet package versions 1.0.0 through 1.0.49 and 1.2.567 contain malicious code. This is a supply chain threat where the package itself is compromised with malicious content.

References

Community reviews

Loading reviews…