The DotSpatial.Projections.Forms.Net NuGet package versions 4.0.656, 4.0.657, and 4.0.658 contain malicious code. This threat involves a malicious package distributed via the NuGet ecosystem, identified by the OpenSSF project. No CVSS score is available for this issue.
The DistributedLocks.AzureStorage.Net NuGet package version 1.0.2 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF and related sources. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported.
The DiscordsRpc NuGet package versions 2.3.4.41 through 2.3.4.45 contain malicious code. This package is identified as a malicious package by the OpenSSF and is flagged in the GCVE database. No official patch or remediation guidance is currently provided.
The DiscordRichPresenceAPI NuGet package versions 0.9.4 through 0.9.8 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally malicious package distributed via NuGet.
The DiscordRPC.Net.Core NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to potentially harm users who install these versions. There is no CVSS score available, and no official patch or remediation guidance is provided in the source data.
The NuGet package DevLib.ModernUI.WinForm version 2.17.8 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is listed in the malicious packages database. No official patch or remediation guidance is provided in the available data.
The Danger.ScriptExec-Vulnerable NuGet package versions 1.0.1 and 1.0.2 contain malicious code. This package has been identified as a malicious package by the OpenSSF and is listed in the malicious packages database. There is no CVSS score available, and no known exploits in the wild have been reported as of the publication date.
The Csla.Windows.Forms.Net NuGet package versions 7.0.0 and 7.0.2 contain malicious code. This is a case of a malicious package identified in the NuGet ecosystem. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No official patch or remediation guidance is provided in the source data.
The CsvHelper.Excel.Core.Net NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised and may execute harmful actions when used. No CVSS score or detailed technical exploitation information is provided.
Crypto.Exchange NuGet packages contain malicious code in multiple specific versions. This threat involves the presence of malicious functionality embedded within these package versions, potentially compromising systems that consume them. No CVSS score or detailed technical exploitation information is provided.
The Coinbase.Api NuGet package version 6.0.1 has been identified as containing malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported as of the publication date.
The NuGet package 'CodeExecTest' version 2.0.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.
Multiple versions of the Clipboard.net package on NuGet have been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. No specific technical details about the malicious behavior are provided in the source data.
The NuGet package Chronos.Platform.Linux.API version 3.6.0.16 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided yet.
The NuGet package Chronos.Platforms version 3.6.0.16 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF project and is listed in the malicious packages database. No CVSS score or detailed technical exploit information is provided.
Malicious code has been identified in specific versions of the CitizenFX package distributed via NuGet. The affected versions are 2.54.7, 2.54.8, and 2.54.9. This issue is cataloged as a malicious package threat rather than a traditional vulnerability with a CVSS score. No known exploits in the wild have been reported at this time.
The NuGet package Chronos.Contracts.Net version 3.6.0.16 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is currently provided by the vendor or source. No known exploits in the wild have been reported.
The NuGet package Celigo.Service.Manager.NetSuite.REST version 1.3.1 has been identified as containing malicious code. This package is flagged as a malicious package in the OpenSSF malicious packages database. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported.
The NuGet package Celigo.Suite.Talk version 7.1.2 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. There is no CVSS score available for this issue, and no known exploits in the wild have been reported to date.
The NuGet package Celigo.Service.Manager.NetSuite version 7.1.2 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions when used. No official patch or remediation guidance has been provided at this time.