Pathoschild.Stardew.Mod.Build.Config (NuGet) · Malicious Code
Affects Pathoschild.Stardew.Mod.Build.ConfigSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:08 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetPathoschild.Stardew.Mod.Build.Configpkg:nuget/Pathoschild.Stardew.Mod.Build.ConfigOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions (=6.5.1, =6.5.2, =6.5.3) of Pathoschild.Stardew.Mod.Build.Config. It is recommended to check the NuGet repository and vendor advisories for any updates or fixed versions before use. If these versions are already in use, consider removing or replacing them with verified safe versions.
Description
The Pathoschild.Stardew.Mod.Build.Config NuGet package versions 6.5.1, 6.5.2, and 6.5.3 have been identified as containing malicious code. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.