The wpfuihelpercore NuGet package versions 1.0.0 and 1.0.2 contain malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a package that may execute harmful actions if integrated into software projects. No official patch or remediation guidance is provided in the available data. There are no known exploits in the wild at this time.