The WpfLightToolkit.Net NuGet package versions 1.0.3 and 1.0.9 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No official patch or remediation guidance is currently provided.