Supply chain
Malicious packages · NuGet
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
782 reports · Feed
- NuGet
-
NuGet
TheOpenAI.API 1.0.0, 1.1.5, 0.0.5, 1.1.3, 0.0.1, 1.0.1, 1.0.2, 1.0.3, 0.0.3, 0.0.2, 0.0.4, 1.…MAL-2024-4688 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
-
NuGet
Solana 1.0.23, 1.0.17, 1.0.3, 1.0.15, 1.0.20, 1.0.5, 1.0.2, 1.0.16, 1.0.18, 1.0.8, 34.…MAL-2024-4647 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet
-
NuGet
Soenneker.Redis.Util.Net 5.6.2, 2.5.6, 4.8.8, 8.2.5, 3.7.2, 7.1.6, 1.6.9, 3.3.1, 7.7.2, 6.3.4, 1.4.5, 3.…MAL-2024-4646 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet