This threat involves a malicious package named hackney.core.enums in the NuGet ecosystem, specifically version 99.99.99. The package has been flagged by the OpenSSF malicious packages project and is cataloged under MAL-2026-7448. There is no detailed vulnerability or exploitation technique described, only that the package itself contains malicious code. No known exploits in the wild have been reported.

Use of the affected package version may result in execution of malicious code within applications that consume it, potentially compromising the security and integrity of those applications. The exact impact depends on the malicious code's behavior, which is not detailed in the provided information.

No official patch or remediation is indicated. Users should avoid using the affected version (=99.99.99) of hackney.core.enums. It is recommended to remove or replace this package with a trusted alternative. Monitor vendor or repository advisories for updates or official guidance.