The DotSpatial.Projections.Forms.Net NuGet package versions 4.0.656, 4.0.657, and 4.0.658 contain malicious code. This threat involves a malicious package distributed via the NuGet ecosystem, identified by the OpenSSF project. No CVSS score is available for this issue.