The Bunifu.UI2Winforms NuGet package versions 6.1.0, 6.1.1, 6.1.2, and 6.1.3 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No official patch or remediation guidance is currently provided.