Malicious NuGet Packages Set to Activate Time Bombs in 2027 and 2028

Nine malicious NuGet packages, published by the user 'shanhai666', were identified to contain time-delayed sabotage payloads targeting industrial control systems and applications. These packages, which have been downloaded 9,488 times, are designed to activate between 2027 and 2028, using probabilistic triggers to execute their malicious routines. An investigation and removal efforts have been initiated by NuGet following their discovery.