If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4608
Pathoschild.Stardew.Mod.BuildConfig
NuGet package · versions 6.2.8, 6.2.7, 6.3.1, 6.2.3, 6.2.2, 6.2.5, 6.2.9, 6.2.1, 6.2.6, 6.5.1, 6.2.4
Reported Jun 25, 2024 · Updated Oct 24, 2024