If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4432
C1.Wіn
NuGet package · versions 6.0.20232.624, 6.0.20232.625, 6.0.20232.621, 6.0.20232.629, 6.0.20232.631, 6.0.20232.632, 6.0.20232.626, 6.0.20232.627, 6.0.20232.622, 6.0.20232.623, 6.0.20232.628, 6.0.20232.630, 6.0.20232.620
Reported Jun 25, 2024 · Updated Oct 24, 2024