60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
ID: c730f877-1710-5630-bdf2-b234e0b8f9fc
STIX ID: report--c730f877-1710-5630-bdf2-b234e0b8f9fc
Feed Name: The Hacker News
Threat Score
Threat actors have been publishing a new wave of malicious NuGet packages (≈60 packages, 290 versions) since August 2023 that use IL weaving to inject obfuscated downloaders into legitimate .NET PE binaries and deliver the SeroXen RAT; attackers also used homoglyphs to masquerade as popular packages, and the identified packages have been taken down.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.