The Stl.Blazor.Authentication.Net package for the NuGet ecosystem, specifically versions 6.5.8 and 6.5.9, has been flagged as containing malicious code according to the OpenSSF malicious packages database (MAL-2024-4655). This represents a malicious package threat rather than a traditional vulnerability. There is no detailed information on the nature of the malicious code or its impact, and no known exploits in the wild have been reported. No patch or remediation guidance is provided in the source data.

Using the affected versions of this package may introduce malicious code into dependent software projects, potentially leading to compromise of the build environment, execution of unauthorized code, or other supply chain risks. The exact impact is not detailed, and no known active exploitation has been reported.

Since no official patch or remediation guidance is provided, users should avoid using versions 6.5.8 and 6.5.9 of Stl.Blazor.Authentication.Net. It is recommended to remove these versions from projects and replace them with a trusted, verified version or alternative package. Monitor the vendor or NuGet advisories for updates or official remediation.