The Modern.WinForm.UI NuGet package versions 1.4.0.1 through 1.4.0.6 contain malicious code. This is a supply chain threat involving a malicious package published to the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.