Skip to main content
VulnerabilityPublished Updated

HarmonyX.Net (NuGet) · Malicious Code

Affects HarmonyX.NetSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:35 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetHarmonyX.Netpkg:nuget/HarmonyX.NetOther threatsAffected
  • =1.23.5
  • =1.23.6
  • =1.23.7
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using HarmonyX.Net versions 1.23.5, 1.23.6, and 1.23.7. Monitor vendor or repository advisories for updates or fixed versions before resuming use.

Description

HarmonyX.Net NuGet package versions 1.23.5, 1.23.6, and 1.23.7 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…