Trojan in NuGet package masqueraded as Newtonsoft.Json and targeted FG-Crash

Colleagues, I’d like to draw attention to a cybersecurity and supply chain incident.

I came across a dangerous typosquatted package, Newtonsoftt.Json.Net: it masquerades as Newtonsoft.Json while remaining a functional library for ordinary users.

However, in the target environment, the package changes behavior: it interferes with Digitain’s FG-Crash logic, distorts results, and conceals activity through delays and exfiltration to an attacker-controlled server.

Why this matters: such attacks are hard to spot if you only assess whether the library appears to work. I would review dependencies, pin versions, and remove suspicious packages from the build chain.

How do you verify NuGet dependencies in your projects?

#cybersecurity #supplychain #NuGet #AppSec