VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

Lfafafa3 (NuGet) · Malicious Code

Affects Lfafafa3Source GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:16 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetLfafafa3`pkg:nuget/Lfafafa3`Other threats	Affected =0.9.7	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'Lfafafa3' package version 0.9.7. Monitor official advisories for any updates or remediation guidance.

Description

The NuGet package 'Lfafafa3' version 0.9.7 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate it. No specific technical details or exploitation methods are provided. There is no known exploit in the wild at this time.

Impact

Using the malicious package 'Lfafafa3' version 0.9.7 may introduce harmful code into software projects, potentially leading to compromise of the development environment or downstream applications. The exact impact is not detailed, but the presence of malicious code implies risk to confidentiality, integrity, or availability depending on the payload.

Summary

The NuGet package 'Lfafafa3' version 0.9.7 is flagged as a malicious package according to the OpenSSF malicious packages database. This indicates that the package contains harmful code that could compromise systems or data if used. No CVSS score or detailed vulnerability description is available.

References

github.com/advisories/GHSA-6g7p-j9q8-c2hv (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:16 UTC

Technical details

References

Community reviews