Malicious NuGet packages targeted Chinese

[technadu@infosec.exchange]

Malicious NuGet packages targeted Chinese .NET developers.
• ~65K downloads
• Infostealer payloads
• CI/CD systems at risk

Malicious NuGet Packages Target Chinese .NET Ecosystem Developers

Five malicious NuGet packages deploy an infostealer to harvest crypto wallets, SSH keys, and browser data from .NET developers in China.

TechNadu (www.technadu.com)

How are you validating dependencies?
#InfoSec #DevSecOps #CyberSecurity