The binance.csharp package distributed via NuGet has been identified as containing malicious code in numerous specific versions, as cataloged by the OpenSSF malicious packages database. This is a case of a malicious package rather than a traditional software vulnerability. No CVSS score or detailed technical exploitation information is provided. The affected versions are explicitly enumerated, indicating targeted versions that contain the malicious code.

Users who install or use any of the affected versions of the binance.csharp package risk executing malicious code embedded within the package. This can lead to compromise of the development environment, unauthorized actions, or downstream impact on applications depending on this package. No known exploits in the wild are reported at this time.

No official patch or remediation is currently documented. Users should avoid using the affected versions listed and remove or replace them with trusted alternatives. Since this is a malicious package, the best mitigation is to verify package integrity and source before installation. Monitor vendor or repository advisories for updates or removals of the malicious versions. Patch status is not yet confirmed — check the vendor advisory or NuGet repository for current remediation guidance.