If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4012
AvalonEdit.Net
NuGet package · versions 6.3.78, 6.3.63, 6.3.46, 6.3.21, 8.3.0.93, 6.3.5, 6.3.100, 6.3.80, 6.3.6, 6.3.37, 6.3.77, 6.3.79, 6.3.71, 6.3.38, 6.3.62, 6.3.13, 6.3.41, 6.3.65, 8.3.0.91, 6.3.10, 6.3.55, 6.3.84, 6.3.19, 6.3.96, 6.3.…
Reported Jun 25, 2024 · Updated Oct 24, 2024