The Stl.RestEase.Net package versions 6.5.8 and 6.5.9 have been flagged as containing malicious code according to the OpenSSF malicious packages repository. This represents a supply chain compromise where the package itself is malicious, potentially impacting any projects that consume these specific versions. There is no CVSS score or detailed vulnerability description available, and no known exploits in the wild have been reported.

Use of the affected versions (6.5.8 and 6.5.9) of Stl.RestEase.Net may introduce malicious code into dependent applications, potentially leading to unauthorized actions or compromise depending on the payload of the malicious code. The exact impact is not detailed in the source data.

Avoid using the affected versions 6.5.8 and 6.5.9 of Stl.RestEase.Net. Since no patch or fixed version is provided, users should remove these versions from their dependencies and monitor the vendor or trusted sources for updates or clean versions. Validate packages from trusted sources and consider using package integrity verification mechanisms.