Skip to main content
VulnerabilityPublished Updated

Shade.UI.WinForms (NuGet) · Malicious Code

Affects Shade.UI.WinFormsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:04 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetShade.UI.WinFormspkg:nuget/Shade.UI.WinFormsOther threatsAffected
  • =1.0.48
  • =1.0.23
  • =1.0.17
  • =1.0.43
  • =1.0.25
  • =1.0.37
  • =1.0.29
  • =1.0.3
  • =1.0.53
  • =1.7.3.5
  • =1.0.33
  • =1.0.38
  • =1.0.30
  • =1.0.34
  • =1.0.54
  • =1.0.15
  • =1.0.60
  • =1.0.47
  • =1.0.24
  • =1.7.3.6
  • =1.0.20
  • =1.0.5
  • =1.0.44
  • =1.0.2
  • =1.0.16
  • =1.0.45
  • =1.0.50
  • =1.0.56
  • =1.0.18
  • =1.0.8
  • =1.0.59
  • =1.0.22
  • =1.0.28
  • =1.0.55
  • =1.0.27
  • =1.0.35
  • =1.0.51
  • =1.0.12
  • =1.0.21
  • =1.0.40
  • =1.0.36
  • =1.0.46
  • =1.0.58
  • =1.0.10
  • =1.0.26
  • =1.0.42
  • =1.0.19
  • =1.0.32
  • =1.7.3.4
  • =1.0.52
  • =1.0.7
  • =1.0.41
  • =1.0.57
  • =1.0.49
  • =1.0.31
  • =1.0.39
  • =1.0.4
  • =1.0.1
  • =1.0.6
  • =1.0.9
  • =1.0.11
  • =1.0.13
  • =1.0.14
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a clean version is identified or an official fix is released, users should avoid using the affected versions of Shade.UI.WinForms. Consider removing or replacing the package with a verified clean alternative. Monitor official NuGet advisories and the OpenSSF malicious packages repository for updates.

Description

Multiple versions of the Shade.UI.WinForms NuGet package contain malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who integrate it into their software projects. The affected versions are numerous specific releases of Shade.UI.WinForms. No CVSS score is provided for this threat.

References

Community reviews

Loading reviews…