A baker's dozen of packages hosted on the NuGet repository for .NET software developers are actually malicious Trojan components that will compromise the installation system and download ...

A fake NuGet package mimicking Tracer.Fody stayed online for years, stealing Stratis wallet files and passwords from Windows ...

Threat actors are targeting and infecting .NET developers with cryptocurrency stealers delivered through the NuGet repository and impersonating multiple legitimate packages via typosquatting. Three of ...

Apparently an expired NuGet certificate has today caused .NET 5 projects to stop working on Debian Linux, according to multiple reports. About 10 a.m. EDT a post on the Hacker News ...

Attackers are exploiting for the first time a known security risk in a popular MSBuild feature to place hard-to-detect malicious files in the .NET repository. Attackers are constantly coming up with ...

Microsoft has announced that the new sponsorship feature is available for package maintainers in the NuGet.org ecosystem – the package manager for .NET. It allows them to provide sponsorship URLs ...

Microsoft's dev team for .NET MAUI is stamping out memory leaks and improving NuGet functionality in .NET 8 Preview 3. The framework evolves its predecessor, Xamarin.Forms, by adding support to build ...

Threat actors have been observed using the open source package manager NuGet to craft malicious packages targeting .NET developers. According to software package management company JFrog, the ...