VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

Ripple.NetCore.Api (NuGet) · Malicious Code

Affects Ripple.NetCore.ApiSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:05 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetRipple.NetCore.Api`pkg:nuget/Ripple.NetCore.Api`Other threats	Affected =1.1.3 =1.1.2 =1.1.5	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Consider removing these versions from projects and replacing them with a trusted alternative or waiting for a vendor advisory or fixed release. Monitor official sources for updates.

Description

The Ripple.NetCore.Api NuGet package versions 1.1.2, 1.1.3, and 1.1.5 have been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who install it. No CVSS score is provided, and no known exploits in the wild have been reported.

Impact

Users who install these specific versions of Ripple.NetCore.Api may be exposed to malicious code execution, which could lead to compromise of their development environment or downstream applications. The exact impact is not detailed, and no active exploitation has been reported.

Summary

The Ripple.NetCore.Api package on NuGet versions 1.1.2, 1.1.3, and 1.1.5 is flagged as malicious by the OpenSSF malicious packages database. This indicates that these specific versions contain code intended to perform unauthorized or harmful actions. There is no detailed technical description or vendor advisory available to clarify the nature of the malicious code or its impact.

References

github.com/advisories/GHSA-pvcc-5cw6-4xmj (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:05 UTC

Technical details

References

Community reviews