Malicious NuGet packages drop disruptive 'time bombs'

**Malicious NuGet packages with delayed sabotage payloads:** Nine NuGet packages published under the 'shanhai666' account bundled mostly legitimate .NET libraries with a small malicious payload that uses C# extension methods and probabilistic triggers to randomly terminate database/PLC processes or corrupt Siemens S7 PLC writes between 2027–2028 (notably Sharp7Extend), posing a supply‑chain risk to applications and industrial environments; organizations should audit for the listed packages and verify PLC/write integrity and safety logs.