The Bunifu NuGet package versions listed have been flagged for containing malicious code as reported by the OpenSSF malicious packages database. This indicates that these specific versions are compromised and pose a security risk if used in software projects. There is no detailed technical information on the nature of the malicious code or its impact beyond the classification as a malicious package.

Use of the affected Bunifu package versions may lead to the introduction of malicious code into software projects, potentially compromising the confidentiality, integrity, or availability of affected systems. Specific impacts are not detailed in the source data.

No patch or remediation information is provided. Users should avoid using the affected versions of the Bunifu package and obtain the package only from trusted sources. Check the vendor or package repository for updated, clean versions or advisories. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.