Multiple specific versions of the CefSharp.WinForm.Net.Core NuGet package have been identified as containing malicious code, as reported by the OpenSSF malicious packages database. This is a case of a malicious package in the NuGet ecosystem, flagged under MAL-2024-4440 and GHSA-mqwh-ww2m-6pr3. There is no detailed vulnerability or exploitation technique described, only the presence of malicious code within these package versions.

Users who have installed any of the affected versions of the CefSharp.WinForm.Net.Core package may be exposed to malicious code execution risks inherent in the compromised package. This could lead to unauthorized actions depending on the malicious payload, but no specific impact details are provided.

No official patch or remediation guidance is provided in the source data. Users should immediately stop using the affected versions listed and remove or replace them with trusted versions or alternatives. Monitor vendor or repository advisories for updates or clean versions. Since this is a malicious package incident, remediation involves removing the compromised packages from projects and dependency trees.