The NuGet package Tessa.UI2 version 3.6.0.16 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where a package distributed via the NuGet ecosystem is compromised with malicious content. No official patch or remediation guidance is currently provided. There are no known exploits in the wild at this time.