Skip to main content
MalwarePublished Updated

Soenneker.Redis.Util.Net (NuGet) · Malicious Code

Affects Soenneker.Redis.Util.NetSource GCVE Database

0

Malicious package : remove Soenneker.Redis.Util.Net and rotate any secrets on hosts that installed it.

Data as of 20 Jul 2026, 20:03 UTC

Classification

Malicious package

Published to NuGet · OSV MAL-2024-4646

What to do

Remove Soenneker.Redis.Util.Net from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
NuGetSoenneker.Redis.Util.Netpkg:nuget/Soenneker.Redis.Util.NetOther threatsAffected
  • =5.6.2
  • =2.5.6
  • =4.8.8
  • =8.2.5
  • =3.7.2
  • =7.1.6
  • =1.6.9
  • =3.3.1
  • =7.7.2
  • =6.3.4
  • =1.4.5
  • =3.4.5
  • =7.4.2
  • =9.8.9
  • =4.2.4
  • =6.5.7
  • =2.1.3
  • =6.4.5
  • =4.4.3
  • =9.7.6
  • =3.6.7
  • =9.1.4
  • =5.7.3
  • =5.5.4
  • =8.8.4
  • =1.7.6
  • =5.6.6
  • =9.3.4
  • =8.7.5
  • =7.1.4
  • =2.6.7
  • =4.5.8
  • =2.2.7
  • =3.2.9
  • =8.1.9
  • =8.9.5
  • =6.2.3
  • =5.8.6
  • =1.3.4
  • =3.3.5
  • =7.5.1
  • =7.3.9
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The Soenneker.Redis.Util.Net NuGet package contains malicious code in multiple specific versions. This is identified as a malicious package threat rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…