The NBitcoin.Indexer.API package in versions 3.0.0.21, 3.0.1, and 3.0.3 has been flagged as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-4564). This represents a supply chain compromise where the package itself is malicious. There is no CVSS score or detailed vulnerability description available, and no known exploits in the wild have been reported. No vendor advisory or patch information is provided, so remediation status is unknown.

Use of these specific versions of the NBitcoin.Indexer.API package may result in the introduction of malicious code into dependent projects, potentially leading to compromise of systems that consume this package. The exact impact depends on the nature of the malicious code, which is not detailed in the provided data.

Patch status is not yet confirmed — check the vendor advisory or NuGet repository for updated package versions or removal notices. Until a fixed version or official guidance is available, avoid using the affected versions (=3.0.0.21, =3.0.1, =3.0.3) of NBitcoin.Indexer.API. Consider auditing your dependencies and removing or replacing this package if present.