The Bunifu.UI3Winforms package for NuGet, specifically versions 6.1.0, 6.1.1, 6.1.2, 6.1.3, and 6.1.4, has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-4383 and GHSA-gv3m-53fc-xvpq. No further technical details, such as the nature of the malicious code or exploitation methods, are provided in the source data. There is no vendor advisory or patch information available.

Use of the affected versions of Bunifu.UI3Winforms may result in the execution of malicious code within applications that incorporate this package. This could compromise the integrity, confidentiality, or availability of the affected systems or data. However, no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or guidance is available, avoid using the affected versions of Bunifu.UI3Winforms. Consider removing or replacing the package in your projects to prevent potential malicious code execution.