Malicious NuGet packages steal developer credentials, SSH keys, and crypto wallet data

Five malicious NuGet packages have been found targeting .NET developers with an infostealer that can steal browser passwords, cookies, SSH private keys, cryptocurrency wallet data, and local files. Socket researchers said the packages impersonated Chinese .NET UI and enterprise libraries to look useful while hiding malicious behavior. The packages were published under the NuGet account […] The post Malicious NuGet packages steal developer credentials, SSH keys, and crypto wallet data appeared first on VPN Central.