VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

Sanka.UI2.WinForms (NuGet) · Malicious Code

Affects Sanka.UI2.WinFormsSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:05 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetSanka.UI2.WinForms`pkg:nuget/Sanka.UI2.WinForms`Other threats	Affected =0.1.4 =0.1.6 =0.1.3 =0.1.8 =0.1.5 =0.1.7	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should remove these versions from their dependencies and seek alternative trusted packages. Monitor official NuGet and OpenSSF advisories for updates or fixed versions.

Description

The Sanka.UI2.WinForms NuGet package versions 0.1.3 through 0.1.8 contain malicious code. This is a supply chain threat where the package itself is identified as malicious. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided.

Impact

Use of these affected versions of the Sanka.UI2.WinForms package may result in the introduction of malicious code into dependent software projects. This can lead to compromise of the build environment, execution of unauthorized code, or other security risks associated with supply chain malware. No specific exploit in the wild has been reported.

Summary

The Sanka.UI2.WinForms package on NuGet, specifically versions 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, and 0.1.8, has been identified as containing malicious code. This classification is based on the OpenSSF malicious packages database and reported under the identifier MAL-2024-4637. There is no detailed vulnerability or exploit description beyond the presence of malicious code.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:05 UTC

Technical details

References

Community reviews