The NuGet package Rg.Plugins.Popups.Net contains malicious code in multiple specific versions. This issue was identified and cataloged by the OpenSSF as part of their malicious packages project. No official patch or remediation guidance is provided in the available data. The malicious code presence poses a security risk to users of these exact package versions.
The Rimworld.Reference.Libary NuGet package contains malicious code in multiple specific versions. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The Resource.Embedder.Net package version 2.2.0 on NuGet has been identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploitation information is provided.
Reothor.Lab.EvilPackage is a malicious package identified in the NuGet ecosystem. Multiple specific versions of this package are known to contain malicious code. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided. No known exploits in the wild have been reported.
The Reactive.GUI.Winforms NuGet package version 19.4.1 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The Reddit.api NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is provided.
The ReaLTaiizor-WinForm NuGet package versions 3.7.9.5, 3.8.0, and 3.8.2 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score is assigned, and no known exploits in the wild have been reported.
Malicious code has been identified in specific versions of the RadPdf.Net package distributed via NuGet. The affected versions are 3.38.2, 3.38.3, and 3.38.5. This issue is classified as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported at this time.
The RSG.Base package version 10.6.3 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided.
The NuGet package 'PubIishIgnore' version 1.0.11-beta contains malicious code. This package has been identified and cataloged by the OpenSSF malicious packages project and is flagged as a security threat. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or an available patch.
The PublishIgnor package version 1.0.11-beta on NuGet has been identified as containing malicious code. This is a security threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild reported at this time. No patch or remediation guidance is currently available from the vendor or authoritative sources.
The PrivacyGate.net NuGet package versions 2.0.0 and 2.0.1 have been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions when integrated into software projects. No official patch or remediation guidance is currently provided. There are no known exploits in the wild at this time.
The Portable.Xaml.Net NuGet package versions listed contain malicious code. This is a supply chain threat where the package itself is compromised. There is no CVSS score or detailed technical exploitation information available. No official patch or remediation guidance is provided in the source data.
The PayPalMerchant.SDK NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation data is provided.
The Pathoschild.Stardew.ModBuildConfig.Net NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to deliver malicious payloads. No CVSS score or detailed technical exploitation data is available. The affected versions are explicitly identified, indicating targeted versions of the package. There is no information about known exploits in the wild or vendor patches.
The Pathoschild.Stardew.Mod.BuildConfig NuGet package versions 6.2.1 through 6.5.1 contain malicious code. This issue was identified and cataloged by the OpenSSF malicious packages project. No specific technical details about the nature of the malicious code or its impact are provided in the available data.
The Pathoschild.Stardew.Mod.Build.Config NuGet package versions 6.5.1, 6.5.2, and 6.5.3 have been identified as containing malicious code. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The PDFTron.NETCore.Windows.x64.Net NuGet package versions 10.3.0, 10.3.1, and 10.3.2 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised with malicious content. No CVSS score or detailed technical exploit information is provided.
The OpenCvSharp4.WpfExtensions.Net NuGet package versions 4.8.0.20230725 and 4.8.0.20230708 have been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting developers who incorporate it into their projects.
The OtpCsharp NuGet package versions listed contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is compromised with malicious content. No specific technical details or exploitation methods are provided in the source data.