The OCI.DotNetSDK.Waf.Net package version 73.0.0 on NuGet contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally malicious package distributed via a popular package manager.