The IAmRoot package in the NuGet ecosystem has been flagged as containing malicious code across multiple versions. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-4510 and GHSA-p6jj-mw29-v688. The threat is not a vulnerability in the traditional sense but a case of a malicious package distributed via a public package repository. No further technical details or exploit mechanisms are provided in the available data.

Use of the affected versions of the IAmRoot package may introduce malicious code into dependent projects, potentially compromising the security and integrity of software that includes these versions. No specific impact details or exploitation reports are available, and no known active exploitation has been documented.

No official patch or remediation guidance is provided. Users should avoid using the affected versions of the IAmRoot package and remove or replace them with trusted alternatives. Monitor official advisories or the package repository for updates or removal of the malicious package. Since this is a malicious package, the best mitigation is to not use or to remove the affected versions.