#library


Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Jul 22, 2026 // 09:01

Cybersecurity researchers have discovered a NuGet typosquat that’s unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it’s designed to rig live game […]

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

May 7, 2026 // 10:54

A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the […]

Critical flaw in Protobuf library enables JavaScript code execution

Apr 18, 2026 // 18:17

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google’s Protocol Buffers. The […]

Critical flaw in wolfSSL library enables forged certificate use

Apr 14, 2026 // 00:17

A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve […]

Malicious StripeApi.Net NuGet Package Typosquats Official Library to Steal API Keys.

Feb 26, 2026 // 14:58

A malicious NuGet package named StripeApi.Net recently impersonated the official Stripe.net library to steal sensitive API tokens from developers. Key Details of the Attack Impact and Mitigation