VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

Tessa.Windows.V2 (NuGet) · Malicious Code

Affects Tessa.Windows.V2Source GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:00 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetTessa.Windows.V2`pkg:nuget/Tessa.Windows.V2`Other threats	Affected =3.4.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using Tessa.Windows.V2 version 3.4.0. Monitor official advisories for updates or remediation guidance.

Description

The NuGet package Tessa.Windows.V2 version 3.4.0 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild at this time.

Impact

Users who install or use Tessa.Windows.V2 version 3.4.0 may be exposed to malicious code embedded within the package. This could lead to compromise of systems or data depending on the nature of the malicious payload, though no specific impact details are provided. There are no reports of active exploitation in the wild.

Summary

The package Tessa.Windows.V2 version 3.4.0 in the NuGet ecosystem has been flagged as malicious by the OpenSSF malicious packages project and recorded under MAL-2024-4686. This indicates that the package contains intentionally harmful code, posing a risk to users who install or use this specific version. No further technical details or exploitation methods are described in the source data.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:00 UTC

Technical details

References

Community reviews