NuGet

Platform

Threat entity extracted from intelligence sources

Entities›Platforms›NuGet

Frequency

occurrences

First Seen

November 7, 2025

Last Seen

October 19, 2026

API

Overview

Recent Events

Profile

1 / 2

REC

Recon

No techniques detected

Resource Dev

No techniques detected

Initial Access

T1566 - PhishingT1078 - Valid AccountsT1190 - Exploit Public-Facing Application

Execution

T1059 - Command and Scripting InterpreterT1053 - Scheduled Task/JobT1203 - Exploitation for Client Execution

Persistence

T1547 - Boot Or Logon Autostart ExecutionT1574 - Hijack Execution Flow

Priv Esc

No techniques detected

Defense Evasion

T1036 - Masquerading

Cred Access

T1555.002 - Securityd MemoryT1003 - OS Credential Dumping

Discovery

No techniques detected

Lateral Mov

T1021 - Remote Services

Collection

No techniques detected

T1071 - Application Layer Protocol

Exfil

T1041 - Exfiltration Over C2 Channel

Impact

No techniques detected

16 techniques detected across 8 tactics

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (16)

Malicious NuGet Packages Target Chinese Developers, Steal Sensitive Data

May 7·3 sources

AI Coding Agents Expand Software Supply Chain Risks

Jul 27·4 sources

Malicious NuGet Package Targets Sicoob SDK, Exfiltrates Banking Credentials

May 29·3 sources

NuGet Typosquatting Attack Rigging Digitain Game Results

Jul 22·3 sources

Malicious NuGet Packages Deploy Windows Surveillance Malware to Gamers

Jul 15·2 sources

RapidFort Introduces Curated Libraries to Combat Supply Chain Attacks

Jun 11·2 sources

Microsoft Launches Cloud Web Applications Threat Matrix

Sep 10·2 sources

GitHub Expands Dependabot Malware Alerts to Eight Ecosystems

Aug 10·4 sources

NuGet Malware Impersonates Nethereum to Steal Crypto Assets

Dec 18·2 sources

Malicious NuGet Packages Embed Time-Delayed Sabotage Code

Nov 7·4 sources

GitHub Expands Malware Alerts to Eight Package Ecosystems

3d ago·1 sources

Supply Chain Attack Targets ASP.NET Developers via Malicious NuGet Packages

Feb 24·3 sources

Malicious NuGet Package Targets Stripe Developers

Feb 25·2 sources

Sonatype Study Reveals AI Models Require Real-Time Intelligence for Safe Software Recommendations

Mar 24·3 sources

Malicious npm Packages Use Adspect Cloaking in Crypto Scam

Nov 18·12 sources

Malicious NuGet Packages Set to Activate Time Bombs in 2027 and 2028

Nov 12·7 sources

1 / 4

Related Entities

Supply Chain Attack Malware Trojan Data Breach Phishing Worm Brevo Supply Chain Attack Digitain CBO Checkmarx Cloudflare Cosmos

NuGet

Overview

Recent Events

Profile

Malware

CVEs

Threat Actors

Tools

Attack Types

Regions

Sectors

Relationships

Related Clusters (16)

Malicious NuGet Packages Target Chinese Developers, Steal Sensitive Data

AI Coding Agents Expand Software Supply Chain Risks

Malicious NuGet Package Targets Sicoob SDK, Exfiltrates Banking Credentials

NuGet Typosquatting Attack Rigging Digitain Game Results

Malicious NuGet Packages Deploy Windows Surveillance Malware to Gamers

RapidFort Introduces Curated Libraries to Combat Supply Chain Attacks

Microsoft Launches Cloud Web Applications Threat Matrix

GitHub Expands Dependabot Malware Alerts to Eight Ecosystems

NuGet Malware Impersonates Nethereum to Steal Crypto Assets

Malicious NuGet Packages Embed Time-Delayed Sabotage Code

GitHub Expands Malware Alerts to Eight Package Ecosystems

Supply Chain Attack Targets ASP.NET Developers via Malicious NuGet Packages

Malicious NuGet Package Targets Stripe Developers

Sonatype Study Reveals AI Models Require Real-Time Intelligence for Safe Software Recommendations

Malicious npm Packages Use Adspect Cloaking in Crypto Scam

Malicious NuGet Packages Set to Activate Time Bombs in 2027 and 2028

Related Articles (35)

Case Study Github Expands Malware Advisories Across Eight Ecosystems With Openssf

Looking back: OpenSSF data expands GitHub's malware alerts

Libraries

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

Threat matrix: Mapping threats across cloud web applications

Jetbrains Told Everyone To Patch It Didnt Patch Itself

GitHub Expands Dependabot Malware Alerts to Detect Malicious Packages Across 8 Ecosystems

GitHub Dependabot malware alerts now cover eight ecosystems

State Of Dependency Management 2025

Supply Chain Security in the Agentic Era

Malicious NuGet Typosquat Targets Digitain Betting Platform and Rigs Game Results

NuGet typosquat targets Digitain game results

A Single Extra “t” in a NuGet Package Allow Attackers to Manipulate Results

11 Malicious NuGet Game Cheat Packages Deploy Pepesoft Windows Surveillance Malware

Gamers Download Fake Cheats and Hand Attackers a Live Remote Control of Their Windows PCs

Focusing on Vulnerability Prioritization Is Missing the AI-Era Point

RapidFort Launches Curated Libraries to Stop Supply Chain Attacks Before They Reach the Pipeline

Google Chrome's DBSC Now Generally Available to Prevent Account Takeovers

Malicious NuGet Package as Sicoob SDK Exfiltrates Banking Passwords

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Malicious NuGet Packages Target Browser Credentials, SSH Keys, and Crypto Wallets

Malicious NuGet Packages Target Chinese .NET Ecosystem Developers

Malicious NuGet Packages Steal Browser Credentials, SSH Keys, and Crypto Wallets

Microsoft Emergency .NET 10.0.7 Update to Patch Elevation of Privilege Vulnerability

Sonatype Finds AI Grounded in Intelligence Delivers Safer Outcomes

Malicious NuGet package targets Stripe

Malicious NuGet Package Targets Stripe Developers

Malicious NuGet Packages Attacking ASP.NET Developers to Steal Login Credentials

Malicious NuGet Packages Target ASP.NET Developers to Steal Login Credentials

NuGet malware targets crypto wallets, OAuth tokens

Socket researchers uncover NuGet packages that silently sabotage industrial PLCs, safety ...

Malicious NuGet Packages Hide Time

Malicious NuGet packages drop disruptive 'time bombs'

Cybercrims plant destructive time bomb malware in industrial .NET extensions

Cybercrims plant destructive time bomb malware in industrial .NET extensions

Related Entities