Multiple specific versions of the OtpCsharp package on NuGet have been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-4606 and GHSA-5xcp-2vmr-7f23. The affected versions are explicitly enumerated, but no CVSS score or detailed vulnerability description is available. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Use of any of the affected OtpCsharp package versions may result in the introduction of malicious code into dependent software projects. This can lead to compromise of the build environment, execution of unauthorized code, or other malicious activities depending on the payload embedded in the package. The exact impact is not detailed in the source data.

Since this is a malicious package detection, the primary mitigation is to avoid using the listed affected versions of OtpCsharp. Replace them with versions not listed as malicious or remove the dependency entirely. No official patch or fix is indicated in the source data. Users should verify package integrity and source authenticity before use.