The LiveCharts.WinForms.net package version 0.9.7.1 on NuGet is confirmed to contain malicious code as reported by the OpenSSF malicious packages database (MAL-2024-4536). This is a supply chain threat where the package itself is compromised to potentially execute harmful actions when used. There is no detailed technical information or exploit data provided beyond the classification as a malicious package.

Using the affected version 0.9.7.1 of LiveCharts.WinForms.net may introduce malicious code into the software supply chain, potentially leading to unauthorized code execution or other malicious activities depending on the payload. No specific impact details or exploitation reports are available.

Avoid using LiveCharts.WinForms.net version 0.9.7.1. Since no patch or fixed version is indicated, users should remove this version from their dependencies and source packages from trusted, verified sources. Monitor official vendor or repository advisories for updates or clean versions. No official fix or remediation guidance is currently available.