Supply chain
Malicious packages · NuGet
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
782 reports · Feed
-
NuGet
CaptchaCsharp 3.2.6, 3.2.45, 3.2.44, 3.2.37, 3.2.31, 3.2.10, 3.2.43, 3.2.20, 3.2.28, 3.2.29, …MAL-2024-4433 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
-
NuGet
C1.Wіn 6.0.20232.624, 6.0.20232.625, 6.0.20232.621, 6.0.20232.629, 6.0.20232.631, 6.0.…MAL-2024-4432 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
-
NuGet
Bunifu.Ul2.WinForms 6.1.2, 6.1.8, 6.1.3, 6.1.7, 6.1.0, 6.2.0, 6.1.4, 6.1.1, 6.1.6, 6.2.2, 6.1.9, 6.…MAL-2024-4384 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet
-
NuGet
Bunifu.GUI 1.0.23, 1.0.17, 6.3.0, 1.0.43, 1.0.25, 1.0.37, 1.0.29, 1.0.3, 1.0.33, 1.0.38, 1…MAL-2024-4379 reversing-labs
-
NuGet
Bunifu 1.0.48, 1.0.23, 1.0.17, 6.3.0, 1.0.43, 1.0.25, 1.0.37, 1.0.29, 1.0.3, 1.0.33, 1…MAL-2024-4378 reversing-labs
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet
- NuGet