The Superpower-Api package version 3.0.0 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. There is no CVSS score available, and no known exploits in the wild have been reported so far.