Multiple specific versions of the Binance.Libary package on NuGet have been identified as containing malicious code, as reported by the OpenSSF malicious packages database and tracked under MAL-2024-4307. This is a supply chain threat involving a malicious package rather than a conventional software vulnerability. The affected versions are explicitly enumerated, but no further technical details or exploitation methods are provided. No known exploits in the wild have been reported.

Use of the affected Binance.Libary package versions may introduce malicious code into software projects, potentially compromising the integrity and security of dependent applications. The exact impact depends on the nature of the malicious code, which is not detailed in the source data. There is no evidence of active exploitation in the wild at this time.

No official patch or remediation guidance is currently available. Users should avoid using the identified affected versions of Binance.Libary and verify the integrity and provenance of NuGet packages before inclusion in projects. Monitor vendor or repository advisories for updates or removal of the malicious package.