ShellCodeX Intelligence Brief
HIGH
Open Source
NuGet typosquat delivers Trojanized Newtonsoft.Json fork for game rigging
Source headline: Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Threat level
High
Signal strength
75/100
Source confidence
1 source
Published
2 hours ago
Intelligence Summary
A malicious NuGet package named "Newtonsoftt.Json.Net" impersonates the popular Newtonsoft.Json library. Instead of a simple data stealer, the trojanized fork includes logic intended to rig live game outcomes on Digitain. At least seven versions of the typosquat have been published to the NuGet ecosystem. This increases the risk of developers unknowingly integrating malicious code via dependency resolution. Organizations using NuGet should audit dependencies and block untrusted or misspelled packages.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.
Topics
Original reporting
The Hacker News
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Open original source
