Malicious code in Zendesk (NuGet)
Malicious code was discovered in the Zendesk NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.
- Disclosed
- Last updated
- Blast radius
- Zendesk NuGet package consumers
- Ecosystems
- Attack vectors
- Affected entities
- ZendeskNuGet package
Malicious code was detected in the Zendesk package distributed via NuGet. The vulnerability was identified and credited to the OpenSSF's malicious packages tracking initiative, which maintains a catalog of known malicious software supply chain incidents.\n\nThe incident was assigned identifier MAL-2024-4707 and published on July 20, 2026. The source indicates multiple versions of the Zendesk NuGet package were affected.\n\nDevelopers and organizations using the Zendesk NuGet package should review their dependencies and update to a clean version if available.
Indicators of compromise
- Packages
- Zendesk
Remediation
- Remove or update the affected Zendesk NuGet package to a verified clean version
- Audit systems that may have installed the malicious package for signs of compromise
- Review NuGet package dependencies for other potentially compromised packages
- Monitor the OpenSSF malicious packages repository for updates on this incident
Sources
- GitHub Advisory GHSA-4gf2-ff97-7c3f · GitHub Advisory Database
Cite this entry
"Malicious code in Zendesk (NuGet)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 20, 2026; last updated July 20, 2026. https://supplychainattack.org/incident/malicious-code-in-zendesk-nuget-c9nrvr
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in intercom-php (Packagist)
The intercom-php package on Packagist was compromised with malicious code as part of the Mini Shai-Hulud campaign by the TeamPCP threat actor. The malicious payload steals credentials and can propagate to NPM packages using discovered credentials.
Mini Shai HuludTeamPCPNuGetCompromised packageMalicious maintainer - resolvedcritical
Malicious code in Ultimate.Wpf.Toolkit (NuGet)
Multiple versions of the Ultimate.Wpf.Toolkit NuGet package contained malicious code. The incident was identified and documented by the OpenSSF malicious packages project.
NuGetCompromised package - resolvedcritical
Malicious code in YoutubeExtractor.Net (NuGet)
Malicious code was discovered in the YoutubeExtractor.Net NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.
NuGetCompromised package - resolvedcritical
Malicious code in Zendesk.OAuth (NuGet)
Malicious code was discovered in multiple versions of the Zendesk.OAuth NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.
NuGetCompromised package