Malicious code has been identified in specific versions of the Kraken.Exchange package distributed via the NuGet ecosystem. The affected versions are 4.1.1, 4.1.2, and 4.1.3. There is no CVSS score available for this threat, and no known exploits in the wild have been reported. This issue represents a supply chain risk due to the presence of malicious code within a trusted package.