WindowsAPICodePack.Net (NuGet) · Malicious Code
Affects WindowsAPICodePack.NetSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 19:59 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetWindowsAPICodePack.Netpkg:nuget/WindowsAPICodePack.NetOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions (=7.0.4, =7.0.5, =7.0.6) of WindowsAPICodePack.Net. Consider removing or replacing these package versions with trusted alternatives. Monitor vendor advisories and the OpenSSF repository for updates or fixes.
Description
The WindowsAPICodePack.Net NuGet package versions 7.0.4, 7.0.5, and 7.0.6 have been identified as containing malicious code. This issue was reported by the OpenSSF and tracked under MAL-2024-4695. There is no CVSS score or detailed technical exploit information available. No patches or fixes have been indicated for these affected versions.