SharpCashAddr.Core NuGet package versions 1.0.0, 1.0.1, and 1.0.2 contain malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No specific technical details or exploitation methods are provided in the source data.