The OCI.DotNetSDK.Ospgateway.Net NuGet package version 73.0.0 has been flagged as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-4592 and GHSA-8mfp-r2vg-jpwf. There is no CVSS score or detailed technical exploit information available, and no known exploits in the wild have been reported. The threat represents a malicious package supply chain risk rather than a traditional software vulnerability.

If integrated into software projects, this malicious package could execute unauthorized or harmful actions depending on the embedded malicious code. The exact impact is not detailed, but supply chain malware can lead to data compromise, system disruption, or further malware deployment. No active exploitation has been reported to date.

No official patch or remediation is currently documented. Users should avoid using version 73.0.0 of OCI.DotNetSDK.Ospgateway.Net. It is recommended to verify package integrity and source before use and monitor vendor or repository advisories for updates or removal notices. Since this is a malicious package, removing or replacing it with a trusted version or alternative is advised.