Threats Tagged 'nuget supply chain'
View all threats tagged with 'nuget supply chain'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'nuget supply chain'
Click on any threat for detailed analysis and mitigation recommendations
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload 0 Eleven malicious NuGet packages masquerade as game cheats for popular games and act as first-stage downloaders. They use DNS-over-HTTPS to evade local controls, request UAC elevation to resync system time, and download a second-stage PyInstaller payload named pepesoft.exe. The payload performs hardware fingerprinting, enforces licensing via Google Sheets telemetry, respects remote ban-lists, and some variants enable remote control and screenshot capture via Telegram bot commands. All packages share AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator offering a commercial game-automation service. Join the discussion | AlienVault OTX General | 07/15/2026, 16:29:28 UTC Added: 07/15/2026, 22:03:24 UTC |
Showing 1 to 1 of 1 result