Skip to main content
VulnerabilityPublished Updated

Lib.Harmony.net (NuGet) · Malicious Code

Affects Lib.Harmony.netSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:16 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetLib.Harmony.netpkg:nuget/Lib.Harmony.netOther threatsAffected
  • =7.5.3
  • =4.8.6
  • =7.6.6
  • =1.3.3
  • =1.1.7
  • =4.5.1
  • =5.5.9
  • =1.3.1
  • =1.8.9
  • =8.5.7
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using the affected versions of Lib.Harmony.net and replace them with versions not listed as malicious or alternative trusted packages. Monitor vendor or repository advisories for updates or removal of the malicious versions. Since this is a malicious package, removing or replacing the affected versions is the primary mitigation.

Description

The Lib.Harmony.net NuGet package contains malicious code in multiple specific versions. This issue is identified as a malicious package rather than a traditional software vulnerability. No CVSS score is provided, and no known exploits in the wild have been reported. The affected versions are explicitly listed, and no patch or remediation guidance is currently available.

References

Community reviews

Loading reviews…