The KrakenExchange.Net.Core package version 4.1.3 on NuGet contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally malicious package distributed via a popular package manager.
The NuGet package 'KanyeWestWasRight' version 1.1.2 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF project and is listed in the GitHub Security Advisory database. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided by the vendor or authoritative sources.
A malicious package named KeyAuthAPI version 1.2.56 was identified in the NuGet ecosystem. This package contains malicious code, as reported by the OpenSSF and tracked under MAL-2024-4521. There is no CVSS score or detailed technical vulnerability description available. No official patch or remediation guidance has been provided yet.
The KANYEWESTBRIDGADE package version 0.9.7.1 on NuGet has been identified as containing malicious code. This is a report of a malicious package rather than a traditional software vulnerability. No CVSS score or detailed technical exploitation information is provided.
The IAmRoot NuGet package contains malicious code in multiple specific versions. This is identified as a malicious package threat rather than a traditional vulnerability. The affected versions include 0.0.1-beta, 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, and 2.0.0. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No official patch or remediation guidance is provided in the source data.
The IAmRootx NuGet package versions 2.0.0 and 2.0.1 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No official patch or remediation guidance is provided.
The Huobi.Net.Core package version 5.0.1 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. No official patch or remediation guidance is currently provided. There are no known exploits in the wild at this time.
HarmonyX.Net NuGet package versions 1.23.5, 1.23.6, and 1.23.7 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The NuGet package HIC.System.Windows.Forms.DataVisualization.Net versions 1.0.1, 1.0.2, and 1.0.3 contain malicious code. This package has been identified as a malicious package by the OpenSSF project and is listed in the malicious packages database. No CVSS score or detailed technical exploitation information is provided.
The GoogleReCaptcha.V4 NuGet package versions 1.3.1, 1.3.2, 1.3.3, and 1.3.4 have been identified as containing malicious code. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.
The Going.Plaid.Net NuGet package versions 6.7.0 and 6.7.1 have been identified as containing malicious code. This is a case of a malicious package detected in the NuGet ecosystem. No official patch or remediation guidance is provided in the available data.
The NuGet package GetRekt420-3 version 0.9.8 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF and related sources. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. No patch or remediation information is provided.
The NuGet package GetRekt420 version 0.9.7 contains malicious code. This package is identified as a malicious package by the OpenSSF and is listed in the malicious packages database. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. No patch or remediation information is provided.
The NuGet package GetRekt420-2 version 0.9.8 has been identified as containing malicious code. This package is flagged in the OpenSSF malicious packages repository and is recognized as a security threat due to its malicious nature. There is no CVSS score available for this threat. No official patch or remediation has been documented. No known exploits in the wild have been reported.
The GMap.NET.WindowsForms.UI NuGet package versions 1.7.5, 1.7.6, and 1.7.7 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploitation information is provided.
The Forge.Open.AI NuGet package versions 1.1.3, 1.1.4, 1.1.5, and 1.1.6 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No official patch or remediation guidance is provided in the available data.
The Fluentmail.Smtp NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploitation information is provided.
The Easy.Abp.PaymentService.Domain.Shared NuGet package versions 2.8.0 through 2.9.1 contain malicious code. This was identified by the OpenSSF malicious packages project and reported under MAL-2024-4481. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or available patches.
The NuGet package EBBuildClient.Net version 1.0.92 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploitation information is provided.
The DotSpatial.Modeling.Forms.Net NuGet package versions 4.0.656, 4.0.657, and 4.0.658 contain malicious code as identified by the OpenSSF project. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No specific technical details about the malicious behavior or exploitation methods are provided.