If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4638
Sanka.UI3.WinForms
NuGet package · versions 3.7.7, 3.7.55, 3.7.40, 3.7.54, 3.7.38, 3.7.29, 3.7.47, 3.7.16, 3.7.9, 3.7.8, 3.7.12, 3.7.42, 3.7.45, 3.7.22, 3.7.51, 3.7.21, 3.7.32, 3.8.9.6, 3.7.50, 3.7.6, 3.7.15, 3.7.18, 3.7.14, 3.7.13, 3.7.19, 3.…
Reported Jun 25, 2024 · Updated Oct 24, 2024