If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4611
PayPalMerchant.SDK
NuGet package · versions 3.40.25, 3.40.26, 3.40.27, 3.40.24, 3.40.4, 3.40.29, 3.40.21, 3.40.12, 3.40.5, 3.40.30, 3.40.20, 45.51.1, 3.40.13, 3.40.11, 3.40.22, 3.40.17, 45.40.8, 45.40.7, 3.40.8, 3.40.10, 2.16.250, 3.40.9, 3.40…
Reported Jun 25, 2024 · Updated Oct 24, 2024