Multiple versions of the Shade.UI.WinForms NuGet package contain malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who integrate it into their software projects. The affected versions are numerous specific releases of Shade.UI.WinForms. No CVSS score is provided for this threat.