The OCI.DotNetSDK.Osubsubscription.Net package version 73.0.0 on NuGet contains malicious code as identified by the OpenSSF and reported in the GCVE database. This is a case of a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is currently provided.