Malicious code in OCI.DotNetSDK.Threat.intelligence (NuGet)
Malicious code was discovered in the OCI.DotNetSDK.Threat.intelligence NuGet package. The incident was identified and reported via the OpenSSF malicious packages database.
- Disclosed
- Last updated
- Blast radius
- Unknown scope; NuGet package ecosystem reach
- Ecosystems
- Attack vectors
- Affected entities
- OCI.DotNetSDK.Threat.intelligence
A malicious code incident was identified in the OCI.DotNetSDK.Threat.intelligence package distributed via NuGet. The package was flagged as containing malicious code and documented in the OpenSSF's malicious packages repository.\n\nThe incident was disclosed on July 20, 2026, and tracked under identifier MAL-2024-4598. The OpenSSF malicious packages project serves as a public reference for confirmed malicious package incidents across package ecosystems.\n\nUsers of this package should immediately remove or update to a safe version if available. The NuGet package repository should be consulted for remediation guidance and any available patches or safe alternatives.
Indicators of compromise
- Packages
- OCI.DotNetSDK.Threat.intelligence
Remediation
- Remove or uninstall the OCI.DotNetSDK.Threat.intelligence package from affected systems
- Check NuGet package repository for patched or alternative versions
- Audit systems that may have installed this package for any suspicious activity
- Review application dependencies and consider using alternative threat intelligence libraries if available
Sources
- GitHub Advisory GHSA-r699-xgp5-88qg · GitHub Advisory Database
Cite this entry
"Malicious code in OCI.DotNetSDK.Threat.intelligence (NuGet)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 20, 2026; last updated July 20, 2026. https://supplychainattack.org/incident/malicious-code-in-oci-dotnetsdk-threat-intelligence-nuget-8ru4bx
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in Ultimate.Wpf.Toolkit (NuGet)
Multiple versions of the Ultimate.Wpf.Toolkit NuGet package contained malicious code. The incident was identified and documented by the OpenSSF malicious packages project.
NuGetCompromised package - resolvedcritical
Malicious code in YoutubeExtractor.Net (NuGet)
Malicious code was discovered in the YoutubeExtractor.Net NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.
NuGetCompromised package - resolvedcritical
Malicious code in Zendesk.OAuth (NuGet)
Malicious code was discovered in multiple versions of the Zendesk.OAuth NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.
NuGetCompromised package - resolvedcritical
Malicious code in Winforms (NuGet)
Malicious code was discovered in multiple versions of the Winforms package on NuGet. The incident was documented by the OpenSSF malicious packages project and published as GitHub advisory GHSA-wq82-5xjm-57wq.
NuGetCompromised package