If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4606
OtpCsharp
NuGet package · versions 1.0.175, 1.0.170, 1.0.90, 1.0.183, 1.0.25, 1.0.128, 1.0.38, 1.0.30, 1.0.54, 1.0.47, 1.0.118, 1.0.131, 1.0.98, 1.0.5, 1.0.66, 1.0.97, 1.0.16, 1.0.124, 1.0.61, 1.0.115, 1.0.193, 1.0.85, 1.0.18, 1.0.8, …
Reported Jun 25, 2024 · Updated Oct 24, 2024