The NuGet package C1.WinForms.API versions 6.0.20232.611 and 6.0.20232.616 contain malicious code. This was identified and reported by the OpenSSF project as part of their malicious packages database. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported to date.