The OCI.DotNetSDK.Net NuGet package at version 73.0.0 is flagged as malicious by the OpenSSF malicious packages database. This indicates that the package contains intentionally harmful code, posing a risk to developers and systems that consume this package. The advisory does not provide further technical details, exploit methods, or impact specifics beyond the classification as a malicious package. No official patch or fix is noted, and no cloud service remediation applies.

Use of the malicious OCI.DotNetSDK.Net package version 73.0.0 can lead to compromise of the software supply chain, potentially allowing attackers to execute arbitrary code or perform unauthorized actions within affected environments. The exact impact depends on the malicious payload within the package, which is not detailed in the source data. No known active exploitation has been reported.

Since no patch or remediation is currently provided, the primary mitigation is to avoid using OCI.DotNetSDK.Net version 73.0.0. Users should remove this version from their dependencies and replace it with a trusted alternative or a different version if available. Monitor official advisories for updates or fixes. No vendor advisory or official fix is currently available.