Malicious NuGet package targets Stripe

Back Reversinglabs

Malicious NuGet package targets Stripe

Reversinglabs • February 25, 2026

Share: View original

In this latest incident, threat actors target developers with a bogus package — a shift away from cryptocurrency development targets.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious NuGet Package Targets Stripe Developers Cybersecurity researchers have identified a malicious NuGet package named StripeApi.Net that impersonates Stripe's official .NET library, Stripe.net. This incident represents a shift in threat actors' tactics from targeting cryptocurrency to focusing on the financial sector, affecting developers who integrate Stripe payments into their applications. 2 sources 26

Extracted Entities

Attack Types (1)

Supply Chain Attack

MITRE ATT&CK (1)

T1195 - Supply Chain Compromise

Platforms (2)