Skip to main content
VulnerabilityPublished Updated

PayPalMerchant.SDK (NuGet) · Malicious Code

Affects PayPalMerchant.SDKSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:08 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetPayPalMerchant.SDKpkg:nuget/PayPalMerchant.SDKOther threatsAffected
  • =3.40.25
  • =3.40.26
  • =3.40.27
  • =3.40.24
  • =3.40.4
  • =3.40.29
  • =3.40.21
  • =3.40.12
  • =3.40.5
  • =3.40.30
  • =3.40.20
  • =45.51.1
  • =3.40.13
  • =3.40.11
  • =3.40.22
  • =3.40.17
  • =45.40.8
  • =45.40.7
  • =3.40.8
  • =3.40.10
  • =2.16.250
  • =3.40.9
  • =3.40.15
  • =3.40.1
  • =3.40.28
  • =3.40.16
  • =3.40.18
  • =3.40.14
  • =45.40.6
  • =3.40.7
  • =3.40.3
  • =3.40.23
  • =45.41.0
  • =3.40.19
  • =3.40.2
  • =3.40.6
  • =3.40.0
  • =45.51.0
  • =45.40.9
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using the affected versions of PayPalMerchant.SDK and obtain the package only from trusted sources. Monitor vendor advisories or the NuGet repository for updates or official fixes. Since this is a malicious package issue, removing or replacing the affected versions is recommended.

Description

The PayPalMerchant.SDK NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation data is provided.

References

Community reviews

Loading reviews…