The NuGet package Stl.Fusion.Ext.Contracts.Net versions 6.5.8 and 6.5.9 have been identified as containing malicious code. This is based on a report from the OpenSSF malicious packages database. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported at this time.