If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4609
Pathoschild.Stardew.ModBuildConfig.Net
NuGet package · versions 2.1.9, 5.1.3, 4.8.8, 6.4.8, 9.6.9, 4.4.8, 1.4.7, 1.5.6, 6.2.6, 9.2.9
Reported Jun 25, 2024 · Updated Oct 24, 2024