Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

A Single Extra “t” in a NuGet Package Allow Attackers to Manipulate Results

Cybersecurity NewsJuly 22, 20264 min read

A malicious NuGet package used a single extra letter to hide in plain sight, turning a familiar software dependency into a betting-fraud tool. The package, Newtonsoftt.Json.Net, copied the appearance of the widely used Newtonsoft.Json library while carrying code designed to alter game outcomes. The campaign relied on typosquatting, a tactic that exploits small spelling mistakes made […] The post A Single Extra “t” in a NuGet Package Allow Attackers to Manipulate Results appeared first on Cyber Security News.

A malicious NuGet package used a single extra letter to hide in plain sight, turning a familiar software dependency into a betting-fraud tool. The package, Newtonsoftt.Json.Net, copied the appearance of the widely used Newtonsoft.Json library while carrying code designed to alter game outcomes. The campaign relied on typosquatting, a tactic that exploits small spelling mistakes made during package installation. Developers who selected the counterfeit package received a working JSON library, allowing the threat…

Excerpt shown under the publisher's RSS terms · 73 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article