The Bunifu.Ul2.WinForms NuGet package versions 6.1.0 through 6.2.2 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally malicious package distributed via NuGet. No CVSS score or detailed technical exploit information is provided.