Multiple specific versions of the Lib.Harmony.net package on NuGet have been identified as containing malicious code, as reported by the OpenSSF malicious packages database and tracked under MAL-2024-4531. This is a supply chain threat involving a malicious package rather than a conventional vulnerability. The affected versions are explicitly enumerated, and no official patch or fix has been documented. There is no indication of active exploitation in the wild at this time.

Use of the affected versions of Lib.Harmony.net may lead to execution of malicious code, posing a risk to the integrity and security of dependent applications. Since this is a malicious package, the impact depends on the nature of the embedded malicious code, which is not detailed here. No known exploits have been reported so far.

No official patch or remediation is currently documented. Users should avoid using the affected versions of Lib.Harmony.net and replace them with versions not listed as malicious or alternative trusted packages. Monitor vendor or repository advisories for updates or removal of the malicious versions. Since this is a malicious package, removing or replacing the affected versions is the primary mitigation.