The ppy.osu.Game.Lib NuGet package versions 2.4.4, 3.5.1, 4.1.4, 4.6.6, 5.1.7, 5.3.5, 5.7.8, 6.4.2, 7.7.4, and 8.0.2 have been identified as containing malicious code. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No specific technical details or exploitation methods are provided in the available data.
The ZendeskApi.Client.V2 NuGet package versions 5.0.6, 5.0.7, 5.0.8, 5.0.9, and 6.0.0 contain malicious code. This is identified as a malicious package threat rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported.
The Zendesk.OAuth NuGet package versions 7.0.4, 7.0.5, 7.0.6, and 7.0.7 contain malicious code as identified by the OpenSSF and reported in the GCVE database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The Zendesk.Client NuGet package versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. No patch or remediation information is provided, and there are no known exploits in the wild at this time.
The Zendesk.Drivers NuGet package versions 23.0.8565, 23.0.8566, 23.0.8567, and 23.0.8568 contain malicious code. This is identified as a malicious package threat rather than a traditional vulnerability. No CVSS score or detailed technical exploitation information is available.
Malicious code has been identified in specific versions of the Zendesk package distributed via NuGet. The affected versions are 3.12.2, 3.12.3, 3.12.4, and 3.12.5. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided.
The Zendesk-Api NuGet package contains malicious code in multiple specific versions. This issue was identified by the OpenSSF and reported as a malicious package. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance is provided in the source data.
The YoutubeExtractor.Net NuGet package version 5.0.3 contains malicious code as identified by the OpenSSF and reported in a public malware database. This is a supply chain threat involving a malicious package in the NuGet ecosystem. No CVSS score or detailed technical exploit information is available.
The NuGet package Xam.Plugins.Forms.Svg.Net versions 1.0.0.27, 1.0.0.28, and 1.0.2 contain malicious code. This package has been identified as a malicious package by the OpenSSF and reported in the GCVE database. No CVSS score or detailed technical exploitation information is provided.
A malicious code package was identified in the XboxGamebar NuGet package version 5.8.220627001. This package contains harmful code that could compromise systems using this specific version. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.
The WpfScreenHelper.Net NuGet package versions 2.1.0 and 2.1.4 contain malicious code. This package has been identified as a malicious package by the OpenSSF and flagged in the OSS-Fuzz malicious packages database. No CVSS score or detailed technical exploitation information is provided.
The WpfAnimatedGif.Net NuGet package versions 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, and 2.1.0 contain malicious code as identified by the OpenSSF project. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The WpfLightToolkit.Net NuGet package versions 1.0.3 and 1.0.9 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No official patch or remediation guidance is currently provided.
The Wpf.UI.WinForms NuGet package version 6.1.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploit information is provided.
This threat involves malicious code found in multiple specific versions of the Winforms package distributed via NuGet. The package contains intentionally harmful code that could compromise systems using these versions. There is no CVSS score or detailed technical exploitation information available.
The Whatsapp.API NuGet package contains malicious code in multiple specific versions. This issue is identified as a malicious package rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. The affected versions are explicitly listed, and this is not a cloud service, so remediation depends on users avoiding or removing these specific versions.
The WindowsAPICodePack.Net NuGet package versions 7.0.4, 7.0.5, and 7.0.6 have been identified as containing malicious code. This issue was reported by the OpenSSF and tracked under MAL-2024-4695. There is no CVSS score or detailed technical exploit information available. No patches or fixes have been indicated for these affected versions.
The WPFMediaKit.Net NuGet package versions 2.2.0 and 2.2.8 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via NuGet.
The WPF-UI-Net NuGet package versions 3.0.0-preview.6 and 3.0.4-preview.6 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No specific technical details or exploitation methods are provided. There is no information about patches or fixes for these affected versions.
The Ultimate.Wpf.Toolkit NuGet package versions listed contain malicious code. This threat involves the presence of intentionally harmful code within multiple specific versions of the Ultimate.Wpf.Toolkit package distributed via NuGet. There is no CVSS score available, and no known exploits in the wild have been reported as of the publication date.