The CData.Salesforce.Net.Framework NuGet package versions 23.0.8669, 23.0.8670, and 23.0.8671 contain malicious code. This is identified as a malicious package threat rather than a traditional vulnerability. There is no CVSS score available, and no known exploits in the wild have been reported. No official patch or remediation guidance is provided in the available data.