A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. NuGet is an open-source package manager and ...

A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database ...

Two years ago, an account with the name "shanhai666" uploaded nine malicious NuGet packages. This launched a complicated ...

New NuGet.org feature lets package authors add sponsor links so users can support maintainers directly through approved funding platforms.

Attackers are exploiting for the first time a known security risk in a popular MSBuild feature to place hard-to-detect malicious files in the .NET repository. Attackers are constantly coming up with ...