目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
NuGet active

solnetplus

MAL-2025-191614
2026-03-19 12:23:25
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in solnetplus (NuGet)

AI 分析整理qwen3.6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
—
下载量
—
数据源
暂无公开数据
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
NuGetsolnetplus0.0.1
NuGetsolnetplus0.0.10
NuGetsolnetplus0.0.11
NuGetsolnetplus0.0.12
NuGetsolnetplus0.0.13
NuGetsolnetplus0.0.14
NuGetsolnetplus0.0.15
NuGetsolnetplus0.0.16
NuGetsolnetplus0.0.17
NuGetsolnetplus0.0.18
NuGetsolnetplus0.0.19
NuGetsolnetplus0.0.2
NuGetsolnetplus0.0.20
NuGetsolnetplus0.0.21
NuGetsolnetplus0.0.22
NuGetsolnetplus0.0.23
NuGetsolnetplus0.0.24
NuGetsolnetplus0.0.25
NuGetsolnetplus0.0.26
NuGetsolnetplus0.0.27
NuGetsolnetplus0.0.28
NuGetsolnetplus0.0.29
NuGetsolnetplus0.0.3
NuGetsolnetplus0.0.30
NuGetsolnetplus0.0.31
NuGetsolnetplus0.0.32
NuGetsolnetplus0.0.33
NuGetsolnetplus0.0.34
NuGetsolnetplus0.0.35
NuGetsolnetplus0.0.36
NuGetsolnetplus0.0.37
NuGetsolnetplus0.0.38
NuGetsolnetplus0.0.39
NuGetsolnetplus0.0.4
NuGetsolnetplus0.0.40
NuGetsolnetplus0.0.41
NuGetsolnetplus0.0.42
NuGetsolnetplus0.0.43
NuGetsolnetplus0.0.44
NuGetsolnetplus0.0.45
NuGetsolnetplus0.0.46
NuGetsolnetplus0.0.47
NuGetsolnetplus0.0.48
NuGetsolnetplus0.0.49
NuGetsolnetplus0.0.5
NuGetsolnetplus0.0.50
NuGetsolnetplus0.0.51
NuGetsolnetplus0.0.52
NuGetsolnetplus0.0.53
NuGetsolnetplus0.0.54
NuGetsolnetplus0.0.55
NuGetsolnetplus0.0.56
NuGetsolnetplus0.0.57
NuGetsolnetplus0.0.58
NuGetsolnetplus0.0.59
NuGetsolnetplus0.0.6
NuGetsolnetplus0.0.60
NuGetsolnetplus0.0.61
NuGetsolnetplus0.0.62
NuGetsolnetplus0.0.63
NuGetsolnetplus0.0.64
NuGetsolnetplus0.0.65
NuGetsolnetplus0.0.66
NuGetsolnetplus0.0.67
NuGetsolnetplus0.0.68
NuGetsolnetplus0.0.69
NuGetsolnetplus0.0.7
NuGetsolnetplus0.0.70
NuGetsolnetplus0.0.71
NuGetsolnetplus0.0.72
NuGetsolnetplus0.0.73
NuGetsolnetplus0.0.74
NuGetsolnetplus0.0.75
NuGetsolnetplus0.0.76
NuGetsolnetplus0.0.77
NuGetsolnetplus0.0.78
NuGetsolnetplus0.0.79
NuGetsolnetplus0.0.8
NuGetsolnetplus0.0.80
NuGetsolnetplus0.0.81
NuGetsolnetplus0.0.82
NuGetsolnetplus0.0.83
NuGetsolnetplus0.0.84
NuGetsolnetplus0.0.85
NuGetsolnetplus0.0.86
NuGetsolnetplus0.0.9
NuGetsolnetplus2.5.1
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2026-03-19T12:23:25Z","published":"2025-12-01T12:53:59Z","schema_version":"1.7.4","id":"MAL-2025-191614","summary":"Malicious code in solnetplus (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"NuGet","name":"solnetplus","purl":"pkg:nuget/solnetplus"},"versions":["0.0.15","0.0.44","0.0.79","0.0.85","2.5.1","0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8","0.0.9","0.0.10","0.0.11","0.0.12","0.0.13","0.0.14","0.0.16","0.0.17","0.0.18","0.0.19","0.0.20","0.0.21","0.0.22","0.0.23","0.0.24","0.0.25","0.0.26","0.0.27","0.0.28","0.0.29","0.0.30","0.0.31","0.0.32","0.0.33","0.0.34","0.0.35","0.0.36","0.0.37","0.0.38","0.0.39","0.0.40","0.0.41","0.0.42","0.0.43","0.0.45","0.0.46","0.0.47","0.0.48","0.0.49","0.0.50","0.0.51","0.0.52","0.0.53","0.0.54","0.0.55","0.0.56","0.0.57","0.0.58","0.0.59","0.0.60","0.0.61","0.0.62","0.0.63","0.0.64","0.0.65","0.0.66","0.0.67","0.0.68","0.0.69","0.0.70","0.0.71","0.0.72","0.0.73","0.0.74","0.0.75","0.0.76","0.0.77","0.0.78","0.0.80","0.0.81","0.0.82","0.0.83","0.0.84","0.0.86"]}],"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/nuget-malware-crypto-oauth-tokens"}],"credits":[{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"c364967d82039d1886ddc700ba7094d21d3013e4a2f56ee5aee20048a64cb8f9","import_time":"2025-12-02T09:09:35.666545299Z","id":"RLMA-2025-05581","modified_time":"2025-12-01T12:53:59Z","versions":["0.0.15","0.0.44","0.0.79","0.0.85","2.5.1"]},{"source":"reversing-labs","sha256":"e33997f30cf46fa44d17aa43495849cd53fbf062b9fd0a330021877a16d35699","import_time":"2026-03-19T12:18:14.129877788Z","id":"RLMA-2026-00026","modified_time":"2026-03-18T12:10:37Z","versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8","0.0.9","0.0.10","0.0.11","0.0.12","0.0.13","0.0.14","0.0.16","0.0.17","0.0.18","0.0.19","0.0.20","0.0.21","0.0.22","0.0.23","0.0.24","0.0.25","0.0.26","0.0.27","0.0.28","0.0.29","0.0.30","0.0.31","0.0.32","0.0.33","0.0.34","0.0.35","0.0.36","0.0.37","0.0.38","0.0.39","0.0.40","0.0.41","0.0.42","0.0.43","0.0.45","0.0.46","0.0.47","0.0.48","0.0.49","0.0.50","0.0.51","0.0.52","0.0.53","0.0.54","0.0.55","0.0.56","0.0.57","0.0.58","0.0.59","0.0.60","0.0.61","0.0.62","0.0.63","0.0.64","0.0.65","0.0.66","0.0.67","0.0.68","0.0.69","0.0.70","0.0.71","0.0.72","0.0.73","0.0.74","0.0.75","0.0.76","0.0.77","0.0.78","0.0.80","0.0.81","0.0.82","0.0.83","0.0.84","0.0.86"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0