As cited
Copy frozen at (site build).
threat intel
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Researchers discovered a trojanized Newtonsoft.Json fork published to NuGet under the typosquatted name Newtonsoftt.Json.Net that contains code designed to manipulate live game outcomes on the Digitain platform. The package functions as a working library while hiding malicious game-rigging functionality, differing from typical info-stealing packages found on package registries.
Why it matters: Developers who installed this package believing it to be the legitimate Newtonsoft.Json library could unknowingly deploy game-rigging malware into their applications, affecting Digitain users and exposing organizations to fraud and reputational risk.
- Source published
- First seen by Cybersecurity Tracker