The dnlib.net NuGet package versions 4.2.8, 4.2.9, 4.3.0 through 4.3.8, and 4.4.0 through 4.4.2 have been identified as containing malicious code. This classification is based on the OpenSSF malicious packages database and reported under MAL-2024-4472. No further technical details or exploitation methods are described in the source data. No vendor advisory or patch information is available, and no known exploits have been reported.

Users who have integrated any of the affected dnlib.net versions into their software supply chain risk introducing malicious code into their environments. This could lead to compromise depending on the nature of the malicious code, though specific impacts are not detailed in the source data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or guidance is provided, users should avoid using the affected versions listed and consider removing or replacing the dnlib.net package from their projects. Monitoring official sources for updates is recommended.