Tessa.Core (NuGet) · Malicious Code
Affects Tessa.CoreSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:01 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetTessa.Corepkg:nuget/Tessa.CoreOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should verify package integrity and source before installation and consider using alternative versions or packages not flagged as malicious. Monitor vendor or repository advisories for updates or official remediation.
Description
The Tessa.Core NuGet package version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.