WPF-UI-Net (NuGet) · Malicious Code
Affects WPF-UI-NetSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 19:59 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetWPF-UI-Netpkg:nuget/WPF-UI-NetOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions (=3.0.0-preview.6 and =3.0.4-preview.6) of WPF-UI-Net. It is recommended to verify package integrity and source authenticity before use and consider using alternative trusted versions or packages. Monitor vendor advisories for updates.
Description
The WPF-UI-Net NuGet package versions 3.0.0-preview.6 and 3.0.4-preview.6 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No specific technical details or exploitation methods are provided. There is no information about patches or fixes for these affected versions.