The UI2.Guna.Winforms NuGet package versions 2.0.4.5 through 2.0.4.9 contain malicious code. This is a supply chain threat where the package itself is compromised with malicious functionality. No CVSS score or detailed technical exploitation information is provided.
TheOpenAI.API NuGet package versions including 0.0.1 through 1.1.5 contain malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.
The NuGet package Tessa.Windows.V2 version 3.4.0 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild at this time.
The NuGet package Tessa.Web.Client.Net version 3.6.0.16 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any project that includes this specific version. There is no CVSS score available, and no known exploits in the wild have been reported at this time.
The Tessa.Web.Core package version 3.6.0.16 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. No CVSS score or detailed technical exploitation information is provided.
The NuGet package Tessa.UI2 version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where a package distributed via the NuGet ecosystem is compromised with malicious content. No official patch or remediation guidance is currently provided. There are no known exploits in the wild at this time.
The Tessa.Server.Net package version 3.6.0.16 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any project that includes this specific version. No official patch or remediation guidance is currently provided.
The NuGet package Tessa.Postgre.Sql version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a package that may execute unauthorized or harmful actions when used. No CVSS score or detailed technical exploit information is provided.
The NuGet package Tessa.Net.V2 version 3.6.0.16 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploitation information is provided. There is no indication of a patch or fix available for this specific version.
The Tessa.Core NuGet package version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.
The NuGet package Tessa.Linux.V2 version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided for this specific package version.
The NuGet package Tessa.Compilations version 3.4.0 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is provided.
The NuGet package Syntellect.Winium.Web.Driver version 0.1.2 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package rather than a traditional vulnerability with a patch. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. Users should avoid using this package version due to the presence of malicious code.
The Tessa.Analyzer package version 3.6.0.16 on NuGet contains malicious code. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided by the vendor or source.
The NuGet package Syntellect.Winium.Element version 0.2.1 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a security threat due to the presence of malicious content within the package itself.
The NuGet package Syntellect.Winium.Cruciatus.Net version 3.1.0 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting developers and systems that consume this package. No CVSS score is available for this threat.
The Superpower-Api package version 3.0.0 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. There is no CVSS score available, and no known exploits in the wild have been reported so far.
The Stl.Rpc.Server.Net.Fx NuGet package versions 6.5.8 and 6.5.9 have been identified as containing malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The Stl.RestEase.Net NuGet package versions 6.5.8 and 6.5.9 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally malicious package distributed via NuGet. No specific technical details about the nature of the malicious code or its impact are provided.
The Stl.Rpc.Server.Core NuGet package versions 6.5.8 and 6.5.9 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via NuGet.