The NBitcoin.Mono.Core package in specific versions has been identified as containing malicious code by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious NuGet package rather than a vulnerability due to coding errors or design flaws. The affected versions are exactly 3.0.0.46, 3.0.1, and 3.0.3. There is no vendor advisory or patch information available, and no known exploits have been reported. The threat is cataloged under MAL-2024-4565 and GHSA-33pc-g8r4-8cm5.

Use of the affected NBitcoin.Mono.Core package versions may result in execution of malicious code, potentially compromising the security of dependent applications. The exact impact depends on the malicious payload, which is not detailed in the provided data. No active exploitation has been reported so far.

Since no official patch or remediation guidance is provided, the recommended mitigation is to avoid using the affected versions (=3.0.0.46, =3.0.1, =3.0.3) of NBitcoin.Mono.Core. Users should verify package integrity and source authenticity before installation. Monitor official advisories for updates or fixes.