The NuGet package Stl.Plugins.Extensions.Net versions 0.2.22 and 0.2.23 have been identified as containing malicious code. This is a case of a malicious package being published in the NuGet ecosystem. No specific technical details about the nature of the malicious code or its behavior are provided.
The NuGet package Stl.Fusion.Ext.Services.Net versions 6.5.8 and 6.5.9 have been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or available patches.
The Stl.Generators.Net NuGet package versions 6.5.8 and 6.5.9 contain malicious code. This is identified as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance has been provided.
The NuGet package Stl.Fusion.Ext.Contracts.Net versions 6.5.8 and 6.5.9 have been identified as containing malicious code. This is based on a report from the OpenSSF malicious packages database. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported at this time.
The Stl.Blazor.Authentication.Net NuGet package versions 6.5.8 and 6.5.9 have been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate these specific versions. No CVSS score or detailed technical exploit information is provided.
The Stl.CommandLine.Net NuGet package versions 0.2.22 and 0.2.23 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package distributed via NuGet. No CVSS score or detailed technical exploitation data is available.
Multiple specific versions of the Solana package distributed via NuGet have been identified as containing malicious code. This malicious package threat is documented by the OpenSSF and tracked under MAL-2024-4647. There is no CVSS score or detailed technical exploitation information available. No official patch or remediation guidance has been provided at this time.
Malicious code has been identified in multiple specific versions of the SolanaWallet package distributed via NuGet. This package contains harmful code that could compromise users who install these versions. There is no CVSS score available for this threat, and no known exploits in the wild have been reported at this time.
The Soenneker.Redis.Util.Net NuGet package contains malicious code in multiple specific versions. This is identified as a malicious package threat rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.
Skylark.Net NuGet packages versions 3.1.1.6, 3.1.2, and 3.1.4 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
SharpCashAddr.Core NuGet package versions 1.0.0, 1.0.1, and 1.0.2 contain malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No specific technical details or exploitation methods are provided in the source data.
The Simplify.Windows.Forms.Net NuGet package versions 1.1.3, 1.1.4, and 1.1.5 contain malicious code. This is identified as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided in the available data.
The Shade.WPF.Controls NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to include harmful functionality. There is no CVSS score available, and no official patch or remediation guidance has been provided. Users should avoid using the affected versions and remove them if already in use.
Multiple versions of the Shade.UI.WinForms NuGet package contain malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who integrate it into their software projects. The affected versions are numerous specific releases of Shade.UI.WinForms. No CVSS score is provided for this threat.
The Sanka.UI2.WinForms NuGet package versions 0.1.3 through 0.1.8 contain malicious code. This is a supply chain threat where the package itself is identified as malicious. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided.
The Sanka.UI3.WinForms NuGet package contains malicious code in multiple specific versions. This threat involves the presence of malicious content within the package versions listed, potentially impacting projects that incorporate these versions. No detailed technical exploitation or impact scenarios are provided beyond the identification of malicious code.
The Sanka.UI.WinForms NuGet package contains malicious code in multiple versions. This is a supply chain threat where the package itself is identified as malicious. No specific technical details about the malicious behavior are provided in the source data. There is no CVSS score or detailed impact description available. No official patch or remediation guidance is provided.
The Ripple.NetCore.Api NuGet package versions 1.1.2, 1.1.3, and 1.1.5 have been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who install it. No CVSS score is provided, and no known exploits in the wild have been reported.
The Rockstar.AssetManager.Infrastructure NuGet package version 9.7.3 has been identified as containing malicious code. This is a case of a malicious package detected in the NuGet ecosystem. There is no CVSS score or detailed technical exploit information available for this threat. No known exploits in the wild have been reported at this time.
The Rimworld.References.Net NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to potentially harm users who install these versions. No CVSS score or detailed technical exploit information is provided. There are no known exploits in the wild as of the published date.