A baker's dozen of packages hosted on the NuGet repository for .NET software developers are actually malicious Trojan components that will compromise the installation system and download ...

Threat actors have been observed using the open source package manager NuGet to craft malicious packages targeting .NET developers. According to software package management company JFrog, the ...

A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. NuGet is an open-source package manager and ...

Attackers are exploiting for the first time a known security risk in a popular MSBuild feature to place hard-to-detect malicious files in the .NET repository. Attackers are constantly coming up with ...

.NET developers are being targeted with malware designed to steal their cryptocurrency, new reports have claimed. Cybersecurity researchers from JFrog recently spotted an active campaign in which ...

In my regular Practical.NET column, I showed how easy it is to create NuGet packages and discussed how it was a much better way for a developer to share anything you've created, from Entity Framework ...