VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

OCI.DotNetSDK.Osubusage.Net (NuGet) · Malicious Code

Affects OCI.DotNetSDK.Osubusage.NetSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:10 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetOCI.DotNetSDK.Osubusage.Net`pkg:nuget/OCI.DotNetSDK.Osubusage.Net`Other threats	Affected =73.0.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Remove or replace this package version with a trusted alternative. Monitor vendor or repository advisories for updates or official remediation guidance.

Description

The OCI.DotNetSDK.Osubusage.Net package version 73.0.0 on NuGet contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a malicious package distributed via a popular package manager. No CVSS score or detailed technical exploitation information is provided.

Impact

Use of the affected package version 73.0.0 may lead to execution of malicious code within dependent applications. This poses a risk to the integrity and security of software supply chains relying on this package. No known exploits in the wild have been reported at this time.

Summary

The NuGet package OCI.DotNetSDK.Osubusage.Net version 73.0.0 has been identified as containing malicious code by the OpenSSF project and recorded under MAL-2024-4596. This represents a malicious package threat within the NuGet ecosystem. There is no detailed vulnerability or exploit information beyond the classification as a malicious package.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:10 UTC

Technical details

References

Community reviews