OCI.DotNetSDK.Ospgateway.Net (NuGet) · Malicious Code
Affects OCI.DotNetSDK.Ospgateway.NetSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:10 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetOCI.DotNetSDK.Ospgateway.Netpkg:nuget/OCI.DotNetSDK.Ospgateway.NetOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using version 73.0.0 of OCI.DotNetSDK.Ospgateway.Net. It is recommended to verify package integrity and source before use and monitor vendor or repository advisories for updates or removal notices. Since this is a malicious package, removing or replacing it with a trusted version or alternative is advised.
Description
The OCI.DotNetSDK.Ospgateway.Net package version 73.0.0 on NuGet contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package distributed via a popular package manager.