The WpfAnimatedGif.Net NuGet package versions 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, and 2.1.0 contain malicious code as identified by the OpenSSF project. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.