VYPR

nuget · Malicious package advisory

Malware

PayPalMerchant.SDK

MAL-2024-4611

Malicious code in PayPalMerchant.SDK (NuGet)

Details


---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (39)

  • 3.40.25
  • 3.40.26
  • 3.40.27
  • 3.40.24
  • 3.40.4
  • 3.40.29
  • 3.40.21
  • 3.40.12
  • 3.40.5
  • 3.40.30
  • 3.40.20
  • 45.51.1
  • 3.40.13
  • 3.40.11
  • 3.40.22
  • 3.40.17
  • 45.40.8
  • 45.40.7
  • 3.40.8
  • 3.40.10
  • 2.16.250
  • 3.40.9
  • 3.40.15
  • 3.40.1
  • 3.40.28
  • 3.40.16
  • 3.40.18
  • 3.40.14
  • 45.40.6
  • 3.40.7
  • 3.40.3
  • 3.40.23
  • 45.41.0
  • 3.40.19
  • 3.40.2
  • 3.40.6
  • 3.40.0
  • 45.51.0
  • 45.40.9

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.