Skip to main content
MalwarePublished Updated

Fluentmail.Smtp (NuGet) · Malicious Code

Affects Fluentmail.SmtpSource GCVE Database

0

Malicious package : remove Fluentmail.Smtp and rotate any secrets on hosts that installed it.

Data as of 20 Jul 2026, 20:36 UTC

Classification

Malicious package

Published to NuGet · OSV MAL-2024-4490

What to do

Remove Fluentmail.Smtp from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
NuGetFluentmail.Smtppkg:nuget/Fluentmail.SmtpOther threatsAffected
  • =1.0.48
  • =1.0.23
  • =1.0.17
  • =1.0.43
  • =1.0.25
  • =1.0.37
  • =1.0.29
  • =1.0.3
  • =1.0.53
  • =1.0.33
  • =1.0.38
  • =1.0.30
  • =1.0.34
  • =1.0.54
  • =1.0.15
  • =1.0.60
  • =1.0.47
  • =1.0.24
  • =4.5.78
  • =1.0.20
  • =1.0.5
  • =1.0.44
  • =1.0.2
  • =1.0.16
  • =1.0.45
  • =1.0.50
  • =1.0.56
  • =1.0.61
  • =1.0.18
  • =1.0.8
  • =1.0.59
  • =1.0.22
  • =1.0.28
  • =1.0.55
  • =1.0.27
  • =1.0.35
  • =1.0.51
  • =1.0.12
  • =1.0.21
  • =1.0.40
  • =1.0.36
  • =1.0.46
  • =1.0.58
  • =1.0.10
  • =1.0.26
  • =1.0.42
  • =1.0.19
  • =1.0.32
  • =1.0.52
  • =1.0.7
  • =1.0.41
  • =1.0.57
  • =1.0.49
  • =1.0.31
  • =1.0.39
  • =1.0.4
  • =1.0.6
  • =1.0.9
  • =1.0.11
  • =1.0.13
  • =1.0.14
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The Fluentmail.Smtp NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…