DevThe Hacker Newsabout 2 hours ago
Trojanized Newtonsoft.Json Fork Targets Digitain
1 min read
A NuGet typosquat package named Newtonsoftt.Json.Net masquerades as the real Newtonsoft.Json library. Seven versions were published, downloaded about 1,200 times. The trojan rigs Digitain's FG-Crash betting game results and exfiltrates them to an attacker-controlled server. The package has been unlisted but artifacts remain available.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
