The NuGet package Blazor.Captcha versions 1.4.2 and 1.4.3 contain malicious code. This issue was identified and reported by the OpenSSF project as part of their malicious packages database. No CVSS score or detailed technical exploitation information is provided.