The BitPay-Net package version 5.0.1 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or available patches.
BitPay.Net NuGet packages versions 5.0.1, 5.0.2, and 5.0.3 have been identified as containing malicious code. This issue is categorized as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No official patch or remediation guidance is provided in the source data.
The Binance.Library NuGet package version 0.6.1 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate this specific version. No CVSS score is available for this threat. There is no indication of known exploits in the wild or an official patch. Users should avoid using this version of the package.
The Binance.Libary NuGet package contains malicious code in multiple specific versions. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance is provided at this time.
The BgFramework.WindowsForms.Net NuGet package versions 23.9.8.1, 23.9.8.2, and 23.10.0 contain malicious code. This is identified as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided in the source data.
The Betalgo.Open.AI NuGet package versions 7.1.8, 7.1.9, and 7.2.0 have been identified as containing malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. There is no CVSS score available, and no known exploits in the wild have been reported. No official patch or remediation guidance is provided in the available data.
AvalonEdit.Net NuGet packages have been identified as containing malicious code. Multiple specific versions of AvalonEdit.Net are affected. There is no CVSS score available for this threat. No official patch or remediation guidance has been provided in the source data. No known exploits in the wild have been reported.
The Autarkysoft.Bitcoin.Net NuGet package versions 0.24.0, 0.24.1, and 0.24.3 contain malicious code. This was identified by the OpenSSF and reported in the malicious packages database. No specific technical details or exploitation methods are provided in the source data.
The AnimatedGifWpf NuGet package contains malicious code in multiple specific versions. This issue was identified and reported by the OpenSSF project as a malicious package. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided yet.
The Altcoins NuGet package contains malicious code in multiple specific versions. This is identified as a malicious package threat rather than a traditional software vulnerability. The affected versions are numerous discrete releases of the Altcoins package. No CVSS score is provided, and no official patch or remediation guidance is available from the vendor.
Altcoins.Library NuGet packages contain malicious code in multiple specific versions. This malicious package poses a security risk by potentially executing harmful actions when integrated into projects. No CVSS score is provided, and no official patch or remediation guidance is available from the vendor at this time.
The AlgoTrading.Net NuGet package contains malicious code in multiple specific versions. This threat involves the presence of harmful code within the package versions listed, which could compromise systems that incorporate these versions. There is no CVSS score available for this threat, and no detailed technical exploitation information is provided.
AeroWizard.Net version 2.3.1, a NuGet package, has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided yet.
The AlgoTrading NuGet package contains malicious code in multiple specific versions. This threat involves the presence of intentionally harmful code within the package distributed via the NuGet ecosystem. There is no CVSS score available, and no official patch or remediation guidance has been provided. No known exploits in the wild have been reported.
The NuGet package AdamsLair.Duality.Editor.Net version 3.1.9 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No official patch or remediation guidance is currently provided.
The NuGet package AdamsLair.Duality.Core version 3.2.2 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is available.
The NuGet package '86666757657658' version 2.6.8 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate it. No CVSS score or detailed technical exploitation information is provided.
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (1e5ffc01c3fdd918a9e21528fbf797a619b0ef89a5b2ab50e10a14e388b5c8c0)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/c761a42e6980507155befc16756c1eb240ae4247/osv/malicious/nuget/866667576576582/MAL-2024-3994.json))