Back Gbhackers

Malicious NuGet Packages Target ASP.NET Developers to Steal Login Credentials

Gbhackers •Mayura Kathir • February 24, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Supply Chain Attack Targets ASP.NET Developers via Malicious NuGet Packages A supply chain attack has been identified, targeting ASP.NET developers through four malicious NuGet packages. The packages, named NCryptYo, DOMOAuth2_, IRAOAuth2.0, and SimpleWriter_, were published by a threat actor known as 'hamzazaheer' between August 12 and 21, 2024, with the intent to steal login credentials and install persistent backdoors in web applications. 3 sources 29

Malicious NuGet Packages Target ASP.NET Developers to Steal Login Credentials

The full story

Extracted Entities

Attack Types (1)

Platforms (2)