Malicious code has been identified in specific versions of the CitizenFX package distributed via NuGet. The affected versions are 2.54.7, 2.54.8, and 2.54.9. This issue is cataloged as a malicious package threat rather than a traditional vulnerability with a CVSS score. No known exploits in the wild have been reported at this time.