NuGet trap: Newtonsoft.Json.Net rigs sports results in production
A trojanized fork of Newtonsoft.Json was published on NuGet under the name "Newtonsoftt.Json.Net"—one letter different. Seven versions of the package circulated with code designed to tamper with live results from the Digitain sports betting platform.
Aug 13, 2026 5 2