The WPF-UI-Net NuGet package versions 3.0.0-preview.6 and 3.0.4-preview.6 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No specific technical details or exploitation methods are provided. There is no information about patches or fixes for these affected versions.