IAmRoot (NuGet) · Malicious Code
Affects IAmRootSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:35 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetIAmRootpkg:nuget/IAmRootOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions of the IAmRoot package and remove or replace them with trusted alternatives. Monitor official advisories or the package repository for updates or removal of the malicious package. Since this is a malicious package, the best mitigation is to not use or to remove the affected versions.
Description
The IAmRoot NuGet package contains malicious code in multiple specific versions. This is identified as a malicious package threat rather than a traditional vulnerability. The affected versions include 0.0.1-beta, 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, and 2.0.0. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No official patch or remediation guidance is provided in the source data.