HarmonyX.Net NuGet package versions 1.23.5, 1.23.6, and 1.23.7 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.