The Merger package on NuGet contains malicious code in multiple specific versions. This threat involves the presence of intentionally harmful code within the package versions listed, which could compromise systems that incorporate these versions. There is no CVSS score or detailed technical exploitation information available. No official patch or remediation guidance is provided in the source data.
Malicious code has been identified in specific versions of the MailBee package distributed via NuGet. The affected versions are 12.3.1, 12.3.2, 12.3.3, 12.3.4, and 12.3.5. This issue is classified as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed impact analysis available. No known exploits in the wild have been reported. No patch or remediation information is provided in the source data.
The MaterialDesignExtensions.Net NuGet package versions 4.0.0-a02, 4.0.1-a02, and 4.0.2-a02 have been identified as containing malicious code. This issue was reported by the OpenSSF project and is cataloged under MAL-2024-4541. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or available patches.
The Mail package distributed via NuGet contains malicious code in multiple specific versions. This is identified as a malicious package rather than a traditional vulnerability. The affected versions are numerous and explicitly enumerated. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance is provided in the source data.
The LiveChartsCore.net package version 2.0.0-beta.950 on NuGet has been identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided.
A malicious code package was identified in the LiveCharts.net NuGet package version 0.9.7. This package contains harmful code that could compromise systems using this specific version. No official patch or remediation guidance is currently provided. There is no evidence of known exploits in the wild at this time.
The LiveCharts.WinForms.net NuGet package version 0.9.7.1 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF project and is listed in the malicious packages database. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported.
The LiveCharts.Wpf.net NuGet package version 0.9.7 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.
The Live.Charts.Winforms package version 0.9.7.1 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate this specific version. There is no CVSS score or detailed technical exploitation information available.
The Live.Charts.WinForm NuGet package version 0.9.7.1 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploit information is provided.
A malicious code threat has been identified in multiple specific versions of the Litecoin package distributed via the NuGet ecosystem. This issue involves the presence of malicious code within these package versions. There is no CVSS score or detailed technical exploitation information available. No known exploits in the wild have been reported. The affected versions are explicitly listed and limited to certain 12.x releases of the Litecoin package.
The NuGet package 'Lfafafa3' version 0.9.7 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate it. No specific technical details or exploitation methods are provided. There is no known exploit in the wild at this time.
The Lib.Harmony.net NuGet package contains malicious code in multiple specific versions. This issue is identified as a malicious package rather than a traditional software vulnerability. No CVSS score is provided, and no known exploits in the wild have been reported. The affected versions are explicitly listed, and no patch or remediation guidance is currently available.
The NuGet package Lfafafa2 version 0.9.7 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF and is listed in the malicious packages database. No specific technical details about the nature of the malicious code or its impact are provided. There is no known exploit in the wild at this time.
The LedgerWallet.Net NuGet package versions 2.0.0.5, 2.0.1, and 2.0.3 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. There is no CVSS score or detailed technical exploitation information available. No official patch or remediation guidance has been provided.
The NuGet package LagoVista.CloudStorage.Net version 3.0.2287.946 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who install it. No official patch or remediation guidance is currently provided.
The NuGet package LazyProxy.Unity.Net version 1.0.2 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.
The KucoinExchange.Net NuGet package versions 5.0.1, 5.0.2, and 5.0.3 contain malicious code. This is identified as a malicious package threat rather than a traditional vulnerability. There is no CVSS score available, and no known exploits in the wild have been reported. No official patch or remediation guidance is provided in the source data.
The NuGet package Kucoin.Net.Core version 5.0.3 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided yet.
Malicious code has been identified in specific versions of the Kraken.Exchange package distributed via the NuGet ecosystem. The affected versions are 4.1.1, 4.1.2, and 4.1.3. There is no CVSS score available for this threat, and no known exploits in the wild have been reported. This issue represents a supply chain risk due to the presence of malicious code within a trusted package.