Multiple specific versions of the Crypto.Exchange package distributed via NuGet have been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, rather than a traditional software vulnerability. The affected versions are explicitly enumerated, but no further technical details or exploitation methods are described in the source data.

Systems that incorporate any of the affected Crypto.Exchange NuGet package versions risk executing malicious code embedded within these packages. This could lead to compromise depending on the nature of the malicious code, though no specific impact details or exploitation in the wild are reported.

No patch or remediation information is provided. Users should avoid using the listed affected versions of Crypto.Exchange and obtain packages only from trusted sources. Monitor vendor advisories or official channels for updates or fixed versions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.