Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

A trojanized NuGet package named 'Newtonsoftt.Json.Net' has been discovered, masquerading as the legitimate Newtonsoft.Json library. The package targets Digitain's FG-Crash online betting game by rigging live game results and exfiltrating data to an attacker-controlled server. The malicious code activates only under specific conditions, making it stealthy and effective against its intended target while appearing benign to other users. The package has been downloaded approximately 1,200 times and was published by user MagicalPuff96.

AI-extracted · verify before operational use