The Tessa.Server.Net package version 3.6.0.16 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any project that includes this specific version. No official patch or remediation guidance is currently provided.