The KrakenExchange.Net.Core package version 4.1.3 on NuGet contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally malicious package distributed via a popular package manager.