Four rogue NuGet packages and one npm package stole ASP.NET Identity data, deployed C2 backdoors, and reached over 50,000 downloads before removal.
Malicious StripeApi.Net package on NuGet mimicked Stripe.net, logged 180,000 downloads, and stole Stripe API tokens before removal.
Researchers have identified a popular open source package that may be hiding industrial espionage malware. "SqzrFramework480" is a .NET dynamic link library (DLL) that seems to pertain to Bozhon ...
With new dev tooling security vulnerabilities publicized regularly, Microsoft's new .NET 9 Preview 6 addresses the problem in one specific area: NuGet packages used for sharing code libraries, tools ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results