Skip to content
supplychainattack.orgSupply chain attack incident catalog
resolvedcritical

Malicious code in Ripple.NetCore.Api (NuGet)

Malicious code was discovered in the Ripple.NetCore.Api NuGet package. The OpenSSF malicious packages project identified and documented the compromise under identifier MAL-2024-4631.

ShareXLinkedInHacker News
Disclosed
Last updated
Blast radius
Developers and applications using affected versions of Ripple.NetCore.Api from NuGet
Ecosystems
NuGet
Attack vectors
Compromised package
Affected entities
  • Ripple.NetCore.ApiNuGet package

The Ripple.NetCore.Api package on NuGet was found to contain malicious code. This incident was identified and documented by the OpenSSF's malicious packages project, which maintains a catalog of confirmed malicious software supply chain incidents.\n\nThe affected package is Ripple.NetCore.Api distributed via the NuGet package manager. Developers who installed affected versions of this package may have introduced malicious code into their applications.\n\nThe incident was tracked under OpenSSF identifier MAL-2024-4631 and published as GitHub Advisory GHSA-pvcc-5cw6-4xmj on July 20, 2026.

Indicators of compromise

Packages
  • Ripple.NetCore.Api

Remediation

  • Remove or uninstall affected versions of Ripple.NetCore.Api from your projects
  • Review your project dependencies and audit any code that may have been affected
  • Update to a clean, verified version of the package if available
  • Scan your codebase and build artifacts for any malicious code that may have been introduced
  • Consider using package verification and integrity checking tools in your supply chain

Sources

  1. GitHub Advisory GHSA-pvcc-5cw6-4xmj · GitHub Advisory Database

Cite this entry

"Malicious code in Ripple.NetCore.Api (NuGet)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 20, 2026; last updated July 20, 2026. https://supplychainattack.org/incident/malicious-code-in-ripple-netcore-api-nuget-1dwr7o

Suggest a correction

Found an error or have a newer source? Corrections to factual errors take priority over new entries.

Related incidents

  1. resolvedcritical

    Malicious code in Ultimate.Wpf.Toolkit (NuGet)

    Multiple versions of the Ultimate.Wpf.Toolkit NuGet package contained malicious code. The incident was identified and documented by the OpenSSF malicious packages project.

    NuGetCompromised package
  2. resolvedcritical

    Malicious code in YoutubeExtractor.Net (NuGet)

    Malicious code was discovered in the YoutubeExtractor.Net NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.

    NuGetCompromised package
  3. resolvedcritical

    Malicious code in Zendesk.OAuth (NuGet)

    Malicious code was discovered in multiple versions of the Zendesk.OAuth NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.

    NuGetCompromised package
  4. resolvedcritical

    Malicious code in Winforms (NuGet)

    Malicious code was discovered in multiple versions of the Winforms package on NuGet. The incident was documented by the OpenSSF malicious packages project and published as GitHub advisory GHSA-wq82-5xjm-57wq.

    NuGetCompromised package