If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-4640
Shade.WPF.Controls
NuGet package · versions 1.0.0, 1.0.90, 1.0.25, 1.0.128, 1.0.38, 1.0.30, 1.0.54, 1.0.47, 1.0.118, 1.0.131, 1.0.98, 1.0.5, 1.0.66, 1.0.97, 1.0.16, 1.0.124, 1.0.61, 1.0.115, 1.46.6, 1.0.85, 1.0.18, 1.0.8, 1.0.73, 1.0.117, 1.0.…
Reported Jun 25, 2024 · Updated Oct 24, 2024