The Zendesk.OAuth NuGet package versions 7.0.4, 7.0.5, 7.0.6, and 7.0.7 contain malicious code as identified by the OpenSSF and reported in the GCVE database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.