The Ripple.NetCore.Api NuGet package versions 1.1.2, 1.1.3, and 1.1.5 have been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who install it. No CVSS score is provided, and no known exploits in the wild have been reported.