VYPR

nuget · Malicious package advisory

Malware

Crypto.Exchange

MAL-2024-4454

Malicious code in Crypto.Exchange (NuGet)

Details


---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (61)

  • 1.2.53
  • 1.2.39
  • 1.2.52
  • 1.2.5
  • 1.2.25
  • 1.2.26
  • 1.2.1
  • 1.2.51
  • 6.2.2
  • 1.2.54
  • 1.2.33
  • 1.2.18
  • 1.2.9
  • 1.2.21
  • 6.3.5
  • 1.2.34
  • 1.2.38
  • 1.2.8
  • 1.2.28
  • 1.2.32
  • 6.3.4
  • 1.2.36
  • 1.2.46
  • 1.2.17
  • 1.2.43
  • 1.2.15
  • 6.2.4
  • 1.2.11
  • 1.2.4
  • 1.2.37
  • 1.2.3
  • 1.2.49
  • 1.2.22
  • 1.2.44
  • 1.2.23
  • 1.2.6
  • 1.2.20
  • 1.2.13
  • 1.2.35
  • 1.2.48
  • 1.2.56
  • 1.2.45
  • 1.2.7
  • 1.2.24
  • 6.2.1
  • 1.2.30
  • 1.2.41
  • 1.2.29
  • 1.2.42
  • 1.2.55
  • 1.2.19
  • 1.2.47
  • 1.2.27
  • 1.2.50
  • 1.2.31
  • 1.2.12
  • 1.2.16
  • 1.2.40
  • 1.2.10
  • 1.2.2
  • 1.2.14

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.