PublishIgnor (NuGet) · Malicious Code
Affects PublishIgnorSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:07 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetPublishIgnorpkg:nuget/PublishIgnorOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using PublishIgnor version 1.0.11-beta and remove it from their environments if already installed. Monitor official advisories for updates or fixes. Since this is a malicious package, the best mitigation is to not use or to remove the affected version.
Description
The PublishIgnor package version 1.0.11-beta on NuGet has been identified as containing malicious code. This is a security threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild reported at this time. No patch or remediation guidance is currently available from the vendor or authoritative sources.