Malicious NuGet Package Disguised as Sicoob SDK Exfiltrates Banking Passwords

**Malicious NuGet package exfiltrates banking credentials:** A fraudulent NuGet package published as Sicoob.Sdk (versions 2.0.0–2.0.4) impersonated official Sicoob developer tooling and contained hidden code that read PFX certificate files and plaintext credentials, Base64-encoded them, and exfiltrated them via a hardcoded Sentry DSN; the compiled package differed from the clean public GitHub source, indicating a supply-chain style source-to-package mismatch and targeted credential theft with severe implications for banking integrations.