RSG.Base (NuGet) · Malicious Code
Affects RSG.BaseSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:05 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetRSG.Basepkg:nuget/RSG.BaseOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using RSG.Base version 10.6.3 and verify the integrity and provenance of NuGet packages before inclusion in projects. Monitor vendor advisories or the OpenSSF malicious packages repository for updates or removal of the malicious package.
Description
The RSG.Base package version 10.6.3 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided.