The Tessa.Core NuGet package version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploit information is provided.