Security · 2h ago
Trojanized Newtonsoft.Json Fork Targets Online Gambling Platform
Researchers found a malicious NuGet package, Newtonsoftt.Json.Net, that mimics the popular Newtonsoft.Json library. It contains code to rig live game results on the Digitain gambling platform. Seven versions of the trojanized fork were published before discovery.
Meridian48 take
The attack shows supply-chain threats evolving beyond data theft to directly manipulate business logic in high-stakes environments.
Read the full reporting
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library →
The Hacker News
supply-chain-attacknuget-typosquatting