Skip to main content
VulnerabilityPublished Updated

Tessa.Compilations (NuGet) · Malicious Code

Affects Tessa.CompilationsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:01 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetTessa.Compilationspkg:nuget/Tessa.CompilationsOther threatsAffected
  • =3.4.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using Tessa.Compilations version 3.4.0. Monitor vendor or repository advisories for updates or official remediation.

Description

The NuGet package Tessa.Compilations version 3.4.0 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…