Skip to main content
MalwarePublished Updated

Modernzel.UI.WinForms (NuGet) · Malicious Code

Affects Modernzel.UI.WinFormsSource GCVE Database

0

Malicious package : remove Modernzel.UI.WinForms and rotate any secrets on hosts that installed it.

Data as of 20 Jul 2026, 20:16 UTC

Classification

Malicious package

Published to NuGet · OSV MAL-2024-11511

What to do

Remove Modernzel.UI.WinForms from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
NuGetModernzel.UI.WinFormspkg:nuget/Modernzel.UI.WinFormsOther threatsAffected
  • =1.0.0
  • =1.0.1
  • =1.0.2
  • =1.0.3
  • =1.0.4
  • =1.0.5
  • =1.0.6
  • =1.0.7
  • =1.0.8
  • =1.0.9
  • =1.0.10
  • =1.0.11
  • =1.0.12
  • =1.0.13
  • =1.0.14
  • =1.0.15
  • =1.0.16
  • =1.0.17
  • =1.0.18
  • =1.0.19
  • =1.0.20
  • =1.0.21
  • =1.0.22
  • =1.0.23
  • =1.0.24
  • =1.0.25
  • =1.0.26
  • =1.0.27
  • =1.0.28
  • =1.0.29
  • =1.0.30
  • =1.0.31
  • =1.0.32
  • =1.0.33
  • =1.0.34
  • =1.0.35
  • =1.0.36
  • =1.0.37
  • =1.0.38
  • =1.0.39
  • =1.0.40
  • =1.0.41
  • =1.0.42
  • =1.0.43
  • =1.0.44
  • =1.0.45
  • =1.0.46
  • =1.0.47
  • =1.0.48
  • =1.0.49
  • =3.8.0.7
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The Modernzel.UI.WinForms NuGet package versions 1.0.0 through 1.0.49 and 3.8.0.7 contain malicious code. This is a supply chain threat where the package itself is identified as malicious. No specific technical details or exploitation methods are provided.

References

Community reviews

Loading reviews…