The Pathoschild.Stardew.Mod.Build.Config NuGet package versions 6.5.1, 6.5.2, and 6.5.3 have been identified as containing malicious code. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.