Search: “NuGet”

27 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 24 Malware 21 Ransomware 7 Phishing & fraud 4 Threat actor 4 Data breach 3 AI tools & infra 3 Industry 3 Exploit / PoC 2 Tools 2 Model release 1 Policy & legal 1

SeverityAll critical 28 high 27 medium 8 low 5 info 7

Fake Nethereum NuGet Package Used Homoglyph Trick to Steal Crypto Wallet Keys

The Hacker NewsOct 22, 12:23 UTC · Oct 22, 2025Threat actor

57

Hackers Use NuGet Packages to Target .NET Developers

Infosecurity MagazineMar 21, 16:30 UTC · Mar 21, 2023Malware

42

Malicious NuGet Packages Caught Distributing SeroXen RAT Malware

The Hacker NewsOct 31, 12:04 UTC · Oct 31, 2023Malware

42

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

The Hacker NewsMay 31, 12:15 UTC · May 31, 2026Data breach1

57

60 New Malicious Packages Uncovered in NuGet Supply Chain Attack

The Hacker NewsJul 12, 03:38 UTC · Jul 12, 2024Malware

42

Sketchy NuGet Package Likely Linked to Industrial Espionage Targets Developers

The Hacker NewsMar 27, 15:32 UTC · Mar 27, 2024Threat actor

57

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

Rogue NuGet Package Poses as Tracer.Fody, Steals Cryptocurrency Wallet Data

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Malware

42

Rogue NuGet Packages Infect .NET Developers with Crypto

The Hacker NewsMar 23, 06:08 UTC · Mar 23, 2023Vulnerability

42

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

The Hacker NewsFeb 25, 12:43 UTC · Feb 25, 2026Malware

42

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

The Hacker NewsApr 12, 03:41 UTC · Apr 12, 2023Malware

42

Developer account body snatchers pose risks to the software supply chain

Cisco TalosOct 4, 12:51 UTC · Oct 4, 2022Exploit / PoC

57

Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Threat actor

57

Trojanized Newtonsoft.Json Fork Hides Game

The Hacker NewsJul 22, 06:00 UTC · Jul 22, 2026Malware

42

Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

The Hacker NewsDec 22, 16:28 UTC · Dec 22, 2025Data breach

57

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558

60

Open-source attacks move through normal development workflows

Help Net SecurityApr 23, 13:29 UTC · Apr 23, 2026Vulnerability1

42

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware

57

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

The Hacker NewsApr 5, 18:12 UTC · Apr 5, 2026Phishing & fraud1

42

Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains

The Hacker NewsOct 30, 09:40 UTC · Oct 30, 2025Malware1

42

Dependency-Track: Open-source component analysis platform

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2025Vulnerability

42

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

The Hacker NewsSep 25, 07:40 UTC · Sep 25, 2025Malware

42

Supply Chain Attacks Can Exploit Entry Points in Python, npm, and Open

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2024Threat actor

57

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

North Korean Hackers Suspected in New Wave of Malicious npm Packages

The Hacker NewsAug 17, 13:38 UTC · Aug 17, 2023Malware

42

Dependency Confusion: Another Supply-Chain Vulnerability

Schneier on SecurityMar 15, 13:39 UTC · Mar 15, 2021Vulnerability

42

Threat Round-up for May 19

Cisco TalosMay 26, 16:41 UTC · May 26, 2017Ransomware

57