The Sanka.UI.WinForms NuGet package contains malicious code in multiple versions. This is a supply chain threat where the package itself is identified as malicious. No specific technical details about the malicious behavior are provided in the source data. There is no CVSS score or detailed impact description available. No official patch or remediation guidance is provided.