The NuGet package AdamsLair.Duality.Editor.Net version 3.1.9 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No official patch or remediation guidance is currently provided.