Multiple specific versions of the Bunifu.GUI package distributed via NuGet have been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-4379. The threat is not a vulnerability in the traditional sense but rather a case of a malicious package being published and available for installation. No detailed technical analysis or exploit methods are provided in the source data. The affected versions are explicitly listed, covering many 1.0.x releases and version 6.3.0.

Users who install or use any of the enumerated affected versions of Bunifu.GUI risk executing malicious code embedded in the package. This can lead to compromise of the host environment depending on the nature of the malicious payload, which is not detailed in the source. There are no known exploits in the wild reported at this time.

No official patch or remediation is indicated in the provided data. Users should avoid installing or using the listed affected versions of Bunifu.GUI. It is recommended to verify package integrity and source before installation. Check the vendor or NuGet repository for any updated or clean versions. Since this is a malicious package issue, removing affected versions and replacing them with verified safe versions is advised. Patch status is not yet confirmed — check the vendor advisory or NuGet security notices for current remediation guidance.