If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4572
NotifyIcons
NuGet package · versions 1.2.51, 1.2.57, 1.2.68, 1.2.117, 1.2.33, 4.6.4, 1.2.120, 1.2.79, 1.2.61, 1.2.116, 1.2.108, 1.2.69, 1.2.94, 1.2.104, 1.2.106, 1.2.81, 1.2.6, 1.2.13, 1.2.48, 1.2.7, 1.2.41, 1.2.119, 1.2.19, 1.2.27, 1.2…
Reported Jun 25, 2024 · Updated Oct 24, 2024