MalwarePublished 25 Jun 2024Updated 20 Jul 2026

KrakenExchange.Net.Core (NuGet) · Malicious Code

Affects KrakenExchange.Net.CoreSource GCVE Database

What to do

Affected software

Product	Affected	Fixed in
NuGetKrakenExchange.Net.Core`pkg:nuget/KrakenExchange.Net.Core`Other threats	Affected =4.1.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The KrakenExchange.Net.Core package version 4.1.3 on NuGet contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally malicious package distributed via a popular package manager.

Impact

Use of the malicious package version 4.1.3 may lead to execution of unauthorized or harmful code within applications that depend on it. This can compromise the integrity and security of affected software environments. No known exploits in the wild have been reported so far.

Defensive guidance

Until then, avoid using KrakenExchange.Net.Core version 4.1.3. Consider removing or replacing this package version in your projects to prevent potential malicious code execution.

Summary

KrakenExchange.Net.Core version 4.1.3 is identified as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-4523). This is a supply chain compromise where the package itself is malicious, posing risks to any software projects that incorporate this specific version. There is no CVSS score or detailed technical exploit information available.

References

github.com/advisories/GHSA-h6cp-wc65-rph6 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:34 UTC

Technical details

References

Community reviews