#nuget — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #nuget, aggregated by home.social.
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
Как я посадил WireMock.Net на gRPC стероиды
WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf
https://habr.com/ru/articles/1063162/
#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock
-
Как я посадил WireMock.Net на gRPC стероиды
WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf
https://habr.com/ru/articles/1063162/
#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock
-
Как я посадил WireMock.Net на gRPC стероиды
WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf
https://habr.com/ru/articles/1063162/
#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.
Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.
Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.
Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.
Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault
-
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.
Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault
-
A malicious NuGet package, Braintree.Net, acts as a credit card skimmer and steals merchant API keys. The Braintree NuGet typosquat hits .NET devs.
#NuGet #Typosquat #SupplyChainAttack #Malware #CreditCardSkimmer
https://securityonline.info/braintree-nuget-typosquat/?utm_source=mastodon&utm_medium=jetpack_social
-
A malicious NuGet package, Braintree.Net, acts as a credit card skimmer and steals merchant API keys. The Braintree NuGet typosquat hits .NET devs.
#NuGet #Typosquat #SupplyChainAttack #Malware #CreditCardSkimmer
https://securityonline.info/braintree-nuget-typosquat/?utm_source=mastodon&utm_medium=jetpack_social
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/