Tag
#nuget
2 stories taggednuget.

Threat Intelligence
Fake Newtonsoft.Json Package on NuGet Was Built to Rig Live Betting Games
A trojanised copy of a popular coding library targeted Digitain's gambling platform, quietly tampering with live game results.
3 min read

Threat Intelligence
Typosquatted NuGet 'Sicoob.Sdk' Hoovers PFX Certs From Brazilian Banks
A poisoned package impersonating Brazil's Sicoob co-op banking network exfiltrates client IDs and PFX certificates — the same certs that sign API calls into the financial system.
2 min read