SECURITYTHE HACKER NEWS
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Cybersecurity researchers discovered a malicious NuGet package named 'Newtonsoftt.Json.Net' that disguises itself as the legitimate Newtonsoft.Json library. The trojanized fork is designed to manipulate live game results on Digitain, with seven versions published to the package registry.
Mentioned
Related Signal
Adjacent reporting
- Malware dev tries to steal Claude users' secrets, writes npm slop, leaks own GitHub private token
- ScarCruft hackers push BirdCall Android malware via game platform
- Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
- GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension