目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
NuGet active

googleads.api

MAL-2025-191608
2025-12-01 12:53:56
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in googleads.api (NuGet)

AI 分析整理claude-sonnet-4-6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
—
下载量
—
数据源
暂无公开数据
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
NuGetgoogleads.api0.0.1
NuGetgoogleads.api0.0.10
NuGetgoogleads.api0.0.11
NuGetgoogleads.api0.0.12
NuGetgoogleads.api0.0.13
NuGetgoogleads.api0.0.14
NuGetgoogleads.api0.0.15
NuGetgoogleads.api0.0.16
NuGetgoogleads.api0.0.17
NuGetgoogleads.api0.0.18
NuGetgoogleads.api0.0.19
NuGetgoogleads.api0.0.2
NuGetgoogleads.api0.0.20
NuGetgoogleads.api0.0.21
NuGetgoogleads.api0.0.22
NuGetgoogleads.api0.0.23
NuGetgoogleads.api0.0.24
NuGetgoogleads.api0.0.25
NuGetgoogleads.api0.0.26
NuGetgoogleads.api0.0.27
NuGetgoogleads.api0.0.28
NuGetgoogleads.api0.0.29
NuGetgoogleads.api0.0.3
NuGetgoogleads.api0.0.30
NuGetgoogleads.api0.0.31
NuGetgoogleads.api0.0.32
NuGetgoogleads.api0.0.33
NuGetgoogleads.api0.0.34
NuGetgoogleads.api0.0.35
NuGetgoogleads.api0.0.36
NuGetgoogleads.api0.0.37
NuGetgoogleads.api0.0.38
NuGetgoogleads.api0.0.39
NuGetgoogleads.api0.0.4
NuGetgoogleads.api0.0.40
NuGetgoogleads.api0.0.5
NuGetgoogleads.api0.0.6
NuGetgoogleads.api0.0.7
NuGetgoogleads.api0.0.8
NuGetgoogleads.api0.0.9
NuGetgoogleads.api2.45.7
NuGetgoogleads.api2.45.8
NuGetgoogleads.api2.45.9
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2025-12-01T12:53:56Z","published":"2025-12-01T12:53:56Z","schema_version":"1.7.4","id":"MAL-2025-191608","summary":"Malicious code in googleads.api (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"NuGet","name":"googleads.api","purl":"pkg:nuget/googleads.api"},"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8","0.0.9","0.0.10","0.0.11","0.0.12","0.0.13","0.0.14","0.0.15","0.0.16","0.0.17","0.0.18","0.0.19","0.0.20","0.0.21","0.0.22","0.0.23","0.0.24","0.0.25","0.0.26","0.0.27","0.0.28","0.0.29","0.0.30","0.0.31","0.0.32","0.0.33","0.0.34","0.0.35","0.0.36","0.0.37","0.0.38","0.0.39","0.0.40","2.45.7","2.45.8","2.45.9"]}],"credits":[{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-05575","import_time":"2025-12-02T09:09:35.150078043Z","modified_time":"2025-12-01T12:53:56Z","sha256":"0a711c01a869f80dd8842b50342c0a5e1c34bf1193b3aa2be63737552b01c7f9","source":"reversing-labs","versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8","0.0.9","0.0.10","0.0.11","0.0.12","0.0.13","0.0.14","0.0.15","0.0.16","0.0.17","0.0.18","0.0.19","0.0.20","0.0.21","0.0.22","0.0.23","0.0.24","0.0.25","0.0.26","0.0.27","0.0.28","0.0.29","0.0.30","0.0.31","0.0.32","0.0.33","0.0.34","0.0.35","0.0.36","0.0.37","0.0.38","0.0.39","0.0.40","2.45.7","2.45.8","2.45.9"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0