The markdown-to-html NuGet package versions 1.0.0, 1.0.30, and 1.0.32 contain malicious code. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploitation information is provided.