The NBitpayClient.API NuGet package versions 1.0.0.39 and 1.0.1 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. There is no CVSS score or detailed technical exploit information available.