Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

jfrog.com | research | #supply-chain | #typosquatting | #dotnet | #nuget | #jfrog-research | #trojanized-package

Summary

JFrog discovered a typosquatted NuGet package, Newtonsoftt.Json.Net, that shipped a trojanized Newtonsoft.Json fork to rig results on the Digitain betting platform and exfiltrate them.
Published
Collected

original ↗

Related coverage

blog · aikido.dev
Graphalgo campaign spreads to Terraform providers and Go Modules
Go malware has appeared in two Terraform providers and two Go modules — the first observed abuse of Terraform providers. The Graphalgo Go port hides a hash-gated trigger with blockchain and Slack C2.
blog · netspi.com
3 Software Supply Chain Risks in 2023
Software supply chain attacks in 2023 cluster into three categories: package manager attacks like dependency confusion and typosquatting, developer compromise, and breaches at large software vendors.
blog · netspi.com
Think Outside the Prompt: Creative Approaches to Attacking AI
Using the PyTorch-nightly compromise as a case study, this post explores attacking AI via its supply chain: typosquatted dependencies, credential theft from build machines, and model integrity risks.
research · jfrog.com
PixelSmash – Critical FFmpeg Vulnerability Turns Media Files into Weapons
JFrog discloses PixelSmash (CVE-2026-8461), a CVSS 8.8 FFmpeg MagicYUV heap bug where a crafted 50 KB media file yields RCE against apps like Jellyfin and Nextcloud; fixed in 8.1.2.
research · jfrog.com
Embracing Complexity in DevOps: Software Supply Chain State of the Union 2024
As we delve deeper into the era of software reliance, the 2024 JFrog Software Supply Chain report emerges as required reading for developers and DevOps professionals who are at the frontline of today’s technological innovations. DevOps and development themes from the 2024 report The report combines Artifactory data, analysis from the JFrog Security Research team,…
research · hunt.io
Fake Homebrew Pages Deliver Cuckoo Stealer via ClickFix | macOS Threat Hunting Analysis
Homebrew typosquats delivered Cuckoo Stealer via ClickFix: a first stage stole credentials via dscl authonly prompts, then a macOS infostealer/RAT hitting 20+ wallets and persisting via LaunchAgent.
back