If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2025-192890
sqzrframework480
NuGet package · versions 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 0.0.12, 0.0.13, 0.0.14, 1.0.0, 1.0.1, 24.1.24
Reported Dec 23, 2025 · Updated Dec 24, 2025