Skip to main content
VulnerabilityPublished Updated

MetroModern.UI2 (NuGet) · Malicious Code

Affects MetroModern.UI2Source GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:14 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetMetroModern.UI2pkg:nuget/MetroModern.UI2Other threatsAffected
  • =1.4.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using MetroModern.UI2 version 1.4.0. Remove or replace this package with a trusted alternative. Monitor official advisories for updates or remediation guidance.

Description

The MetroModern.UI2 package version 1.4.0 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or available patches.

References

Community reviews

Loading reviews…