The NBitcoin.Indexer.API NuGet package versions 3.0.0.21, 3.0.1, and 3.0.3 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No specific technical details about the malicious behavior or exploitation methods are provided.