The GoogleReCaptcha.V4 package for NuGet, specifically versions 1.3.1, 1.3.2, 1.3.3, and 1.3.4, has been flagged as a malicious package by the OpenSSF Malicious Packages project. This indicates that these versions contain code intended to perform unauthorized or harmful actions when integrated into software projects. There is no detailed technical description or known exploit information available in the source data. The threat is related to supply chain compromise through a trusted package repository.

Use of the affected GoogleReCaptcha.V4 package versions may lead to execution of malicious code within applications that include these packages. This can compromise the security and integrity of affected software projects. No specific exploit details or impact scenarios are provided, and no known exploits in the wild have been reported at this time.

Since no official patch or remediation guidance is provided, users should immediately stop using the affected versions (=1.3.1, =1.3.2, =1.3.3, =1.3.4) of GoogleReCaptcha.V4. Remove these versions from projects and replace them with a safe alternative or wait for a vendor advisory or fixed release. Monitor official NuGet and vendor channels for updates or security advisories regarding this package.