The Stl.CommandLine.Net NuGet package versions 0.2.22 and 0.2.23 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package distributed via NuGet. No CVSS score or detailed technical exploitation data is available.