News Summary

• A malicious NuGet package that masquerades as a C# software development kit for Sicoob can siphon client IDs and PFX certificates.
• The package is estimated to have been downloaded nearly 500 times.
• The development coincides with the discovery of 14 malicious npm packages that typosquat well-known OpenSearch, ElasticSearch, DevOps, and environment-configuration libraries.
• The packages were published by a single threat actor named "vpmdhaj" ("[email protected]") on May 28, 2026.