Kraken.Exchange (NuGet) · Malicious Code
Affects Kraken.ExchangeSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:34 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetKraken.Exchangepkg:nuget/Kraken.ExchangeOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions 4.1.1, 4.1.2, and 4.1.3 of Kraken.Exchange. Consider upgrading to a later version if available or removing the package until a clean version is confirmed. Monitor vendor advisories and the NuGet repository for updates or official fixes.
Description
Malicious code has been identified in specific versions of the Kraken.Exchange package distributed via the NuGet ecosystem. The affected versions are 4.1.1, 4.1.2, and 4.1.3. There is no CVSS score available for this threat, and no known exploits in the wild have been reported. This issue represents a supply chain risk due to the presence of malicious code within a trusted package.