The PDFTron.NETCore.Windows.x64.Net NuGet package versions 10.3.0, 10.3.1, and 10.3.2 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised with malicious content. No CVSS score or detailed technical exploit information is provided.