The Sanka.UI2.WinForms NuGet package versions 0.1.3 through 0.1.8 contain malicious code. This is a supply chain threat where the package itself is identified as malicious. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided.