Multiple specific versions of the AnimatedGifWpf package on NuGet have been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-4002 and GHSA-p23w-42v3-6vjj. The affected versions are explicitly enumerated, but no further technical details about the nature of the malicious code or its impact are provided. There is no vendor advisory or patch information available at this time.

Use of any of the affected versions of AnimatedGifWpf may result in the introduction of malicious code into dependent projects. The exact impact depends on the malicious payload but could include compromise of systems using these packages. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory or NuGet repository for current remediation guidance. Until a fixed version is released, avoid using the affected versions listed and consider removing or replacing the package in your projects.