Bleepingcomputer

Malicious NuGet Packages Embed Time-Delayed Sabotage Code

First seen 8 Nov 2025, 12:36 UTC • Theregister

•86% similarity •33.4

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Researchers identified nine malicious NuGet packages containing time-delayed sabotage routines targeting .NET applications and industrial control systems. The packages, downloaded nearly 9,500 times, include probabilistic triggers that may activate destructive payloads in 2027 and 2028, potentially affecting safety-critical systems in manufacturing environments.

ThreatCluster AI

Attack Flow

11 entities, 12 inferred relationships (STIX 2.1).

Technique (2)

Malware
Supply Chain Attack

Malware (1)

Sharp7Extend

Affected Platform (8)

.NET
NuGet
PostgreSQL
Sharp7
Siemens S7
Siemens S7 PLCs
SQLite
SQL Server

Relationships

Malware targets .NET
Malware targets NuGet
Malware targets PostgreSQL
Malware targets Sharp7
Supply Chain Attack targets .NET
Supply Chain Attack targets NuGet
Supply Chain Attack targets PostgreSQL
Supply Chain Attack targets Sharp7
Sharp7Extend related to Siemens S7
Sharp7Extend related to Siemens S7 PLCs
Sharp7Extend related to SQLite
Sharp7Extend related to SQL Server

Community

Browse all →

Malicious NuGet Packages Embed Time-Delayed Sabotage Code

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading