#nuget — Public Fediverse posts

I just released version 0.9 of ConsoleRenderer!

This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!

This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.

The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.

https://www.nuget.org/packages/ConsoleRenderer/

#nuget #rendering #terminal #foss

I just released version 0.9 of ConsoleRenderer!

This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!

This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.

The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.

https://www.nuget.org/packages/ConsoleRenderer/

#nuget #rendering #terminal #foss

I just released version 0.9 of ConsoleRenderer!

This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!

This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.

The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.

https://www.nuget.org/packages/ConsoleRenderer/

#nuget #rendering #terminal #foss

I just released version 0.9 of ConsoleRenderer!

This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!

This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.

The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.

https://www.nuget.org/packages/ConsoleRenderer/

#nuget #rendering #terminal #foss

I just released version 0.9 of ConsoleRenderer!

This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!

This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.

The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.

https://www.nuget.org/packages/ConsoleRenderer/

#nuget #rendering #terminal #foss

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Pulse ID: 6a585deae380be77ce7e1512
Pulse Link: https://otx.alienvault.com/pulse/6a585deae380be77ce7e1512
Pulse Author: Tr1sa111
Created: 2026-07-16 04:28:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NuGet #OTX #OpenThreatExchange #Windows #bot #Tr1sa111

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.

Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.

Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.

Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.

Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepesoft.exe from GitHub and Hugging Face under username pepegit666. The payload binds to hardware fingerprints, enforces licensing through Google Sheets telemetry, honors remote ban-lists, and in three variants exposes Telegram bot commands enabling screenshot capture and remote control. All packages share identical AWS credentials and mutex identifiers, linking them to a single Russian-speaking operator running a commercial game-automation service marketed through pepesoft.ru and Telegram channel pepesoft777.

Pulse ID: 6a57b568d98a7ae03ccd6071
Pulse Link: https://otx.alienvault.com/pulse/6a57b568d98a7ae03ccd6071
Pulse Author: AlienVault
Created: 2026-07-15 16:29:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #DNS #GitHub #Google #HTTP #HTTPS #HuggingFace #InfoSec #NET #NuGet #OTX #OpenThreatExchange #RAT #RCE #Russia #Telegram #Windows #bot #AlienVault

A malicious NuGet package, Braintree.Net, acts as a credit card skimmer and steals merchant API keys. The Braintree NuGet typosquat hits .NET devs.

#NuGet #Typosquat #SupplyChainAttack #Malware #CreditCardSkimmer

https://securityonline.info/braintree-nuget-typosquat/?utm_source=mastodon&utm_medium=jetpack_social

A malicious NuGet package, Braintree.Net, acts as a credit card skimmer and steals merchant API keys. The Braintree NuGet typosquat hits .NET devs.

#NuGet #Typosquat #SupplyChainAttack #Malware #CreditCardSkimmer

https://securityonline.info/braintree-nuget-typosquat/?utm_source=mastodon&utm_medium=jetpack_social

If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.

https://git.jordanwages.com/wagesj45/CapyKit

Documentation: https://capykit.happycapy.net/

Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.

If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.

https://git.jordanwages.com/wagesj45/CapyKit

Documentation: https://capykit.happycapy.net/

Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.

If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.

https://git.jordanwages.com/wagesj45/CapyKit

Documentation: https://capykit.happycapy.net/

Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.

If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.

https://git.jordanwages.com/wagesj45/CapyKit

Documentation: https://capykit.happycapy.net/

Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.

#TIL Nowadays #NuGET replaces #API keys with what they call trusted publishing which is kind of oAuth where CI runs (currently only #GitHub actions, it seems) ask for a short-lived token, receive it and publish a package. Reason number 42 for me to stay on gitHub. #DotNet

#TIL Nowadays #NuGET replaces #API keys with what they call trusted publishing which is kind of oAuth where CI runs (currently only #GitHub actions, it seems) ask for a short-lived token, receive it and publish a package. Reason number 42 for me to stay on gitHub. #DotNet

#TIL Nowadays #NuGET replaces #API keys with what they call trusted publishing which is kind of oAuth where CI runs (currently only #GitHub actions, it seems) ask for a short-lived token, receive it and publish a package. Reason number 42 for me to stay on gitHub. #DotNet

#TIL Nowadays #NuGET replaces #API keys with what they call trusted publishing which is kind of oAuth where CI runs (currently only #GitHub actions, it seems) ask for a short-lived token, receive it and publish a package. Reason number 42 for me to stay on gitHub. #DotNet

#TIL Nowadays #NuGET replaces #API keys with what they call trusted publishing which is kind of oAuth where CI runs (currently only #GitHub actions, it seems) ask for a short-lived token, receive it and publish a package. Reason number 42 for me to stay on gitHub. #DotNet

I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/

#aspire #nuget #github-actions #security #devops #dotnet

I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/

#aspire #nuget #github-actions #security #devops #dotnet

I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/

#aspire #nuget #github-actions #security #devops #dotnet

I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/

#aspire #nuget #github-actions #security #devops #dotnet

I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/

#aspire #nuget #github-actions #security #devops #dotnet

Just blogged: Follow-up to my 2021 console stack post: templates scaffold well, but shared glue code drifts when you maintain many CLI tools.

Now I use Devlead.Console.Template plus the Devlead.Console source package. Scaffold once, update bootstrap via NuGet. Partial Program hooks for your commands and DI.

https://www.devlead.se/posts/2026/2026-06-27-template-plus-source-package-my-dotnet-console-stack-in-2026

#dotnet #csharp #oss #nuget

Just blogged: Follow-up to my 2021 console stack post: templates scaffold well, but shared glue code drifts when you maintain many CLI tools.

Now I use Devlead.Console.Template plus the Devlead.Console source package. Scaffold once, update bootstrap via NuGet. Partial Program hooks for your commands and DI.

https://www.devlead.se/posts/2026/2026-06-27-template-plus-source-package-my-dotnet-console-stack-in-2026

#dotnet #csharp #oss #nuget

Just blogged: Follow-up to my 2021 console stack post: templates scaffold well, but shared glue code drifts when you maintain many CLI tools.

Now I use Devlead.Console.Template plus the Devlead.Console source package. Scaffold once, update bootstrap via NuGet. Partial Program hooks for your commands and DI.

https://www.devlead.se/posts/2026/2026-06-27-template-plus-source-package-my-dotnet-console-stack-in-2026

#dotnet #csharp #oss #nuget

Just blogged: Follow-up to my 2021 console stack post: templates scaffold well, but shared glue code drifts when you maintain many CLI tools.

Now I use Devlead.Console.Template plus the Devlead.Console source package. Scaffold once, update bootstrap via NuGet. Partial Program hooks for your commands and DI.

https://www.devlead.se/posts/2026/2026-06-27-template-plus-source-package-my-dotnet-console-stack-in-2026

#dotnet #csharp #oss #nuget

Just blogged: Follow-up to my 2021 console stack post: templates scaffold well, but shared glue code drifts when you maintain many CLI tools.

Now I use Devlead.Console.Template plus the Devlead.Console source package. Scaffold once, update bootstrap via NuGet. Partial Program hooks for your commands and DI.

https://www.devlead.se/posts/2026/2026-06-27-template-plus-source-package-my-dotnet-console-stack-in-2026

#dotnet #csharp #oss #nuget

File-based apps в .NET 10

Для небольших скриптов на C# долгое время приходилось создавать полноценный проект даже ради нескольких строк кода. В.NET 10 появилась поддержка file‑based apps — теперь приложение можно запускать и публиковать прямо из одного.cs‑файла. Разбираемся, как это работает и где новый подход действительно полезен.

https://habr.com/ru/companies/otus/articles/1049290/

#NET_10 #C# #filebased_apps #Native_AOT #ASPNET_Core #minimal_API #NuGet #CLI_утилиты #автоматизация #скрипты

File-based apps в .NET 10

Для небольших скриптов на C# долгое время приходилось создавать полноценный проект даже ради нескольких строк кода. В.NET 10 появилась поддержка file‑based apps — теперь приложение можно запускать и публиковать прямо из одного.cs‑файла. Разбираемся, как это работает и где новый подход действительно полезен.

https://habr.com/ru/companies/otus/articles/1049290/

#NET_10 #C# #filebased_apps #Native_AOT #ASPNET_Core #minimal_API #NuGet #CLI_утилиты #автоматизация #скрипты

File-based apps в .NET 10

Для небольших скриптов на C# долгое время приходилось создавать полноценный проект даже ради нескольких строк кода. В.NET 10 появилась поддержка file‑based apps — теперь приложение можно запускать и публиковать прямо из одного.cs‑файла. Разбираемся, как это работает и где новый подход действительно полезен.

https://habr.com/ru/companies/otus/articles/1049290/

#NET_10 #C# #filebased_apps #Native_AOT #ASPNET_Core #minimal_API #NuGet #CLI_утилиты #автоматизация #скрипты

I really wish #NuGet had an SBOM tab, i.e., #dotnet tools show "This package has no dependencies." which, from a NuGet package point of view, is true, but .NET tools can have plenty of dependencies, they're just bundled. Dependencies aren't just a package graph; they're acknowledgement and risk.

I really wish #NuGet had an SBOM tab, i.e., #dotnet tools show "This package has no dependencies." which, from a NuGet package point of view, is true, but .NET tools can have plenty of dependencies, they're just bundled. Dependencies aren't just a package graph; they're acknowledgement and risk.

I really wish #NuGet had an SBOM tab, i.e., #dotnet tools show "This package has no dependencies." which, from a NuGet package point of view, is true, but .NET tools can have plenty of dependencies, they're just bundled. Dependencies aren't just a package graph; they're acknowledgement and risk.

I really wish #NuGet had an SBOM tab, i.e., #dotnet tools show "This package has no dependencies." which, from a NuGet package point of view, is true, but .NET tools can have plenty of dependencies, they're just bundled. Dependencies aren't just a package graph; they're acknowledgement and risk.

I really wish #NuGet had an SBOM tab, i.e., #dotnet tools show "This package has no dependencies." which, from a NuGet package point of view, is true, but .NET tools can have plenty of dependencies, they're just bundled. Dependencies aren't just a package graph; they're acknowledgement and risk.

Just released the StyloExtract packages https://www.nuget.org/packages?q=styloextract&includeComputedFrameworks=true&prerel=true&sortby=relevance

Really for internal use but someone might find them useful.
It's an adaptive HTML to (AI Friendly, structural) Markdown converter designed for extensibility and AoT compatibility.

It's the basis of a future StyloBot feature where it will auto generate any upstream page to markdown for AI scrapers automatically. This lets it be FAST!

#nuget #stylobot

Just released the StyloExtract packages https://www.nuget.org/packages?q=styloextract&includeComputedFrameworks=true&prerel=true&sortby=relevance

Really for internal use but someone might find them useful.
It's an adaptive HTML to (AI Friendly, structural) Markdown converter designed for extensibility and AoT compatibility.

It's the basis of a future StyloBot feature where it will auto generate any upstream page to markdown for AI scrapers automatically. This lets it be FAST!

#nuget #stylobot

Just released the StyloExtract packages https://www.nuget.org/packages?q=styloextract&includeComputedFrameworks=true&prerel=true&sortby=relevance

Really for internal use but someone might find them useful.
It's an adaptive HTML to (AI Friendly, structural) Markdown converter designed for extensibility and AoT compatibility.

It's the basis of a future StyloBot feature where it will auto generate any upstream page to markdown for AI scrapers automatically. This lets it be FAST!

#nuget #stylobot

Just released the StyloExtract packages https://www.nuget.org/packages?q=styloextract&includeComputedFrameworks=true&prerel=true&sortby=relevance

Really for internal use but someone might find them useful.
It's an adaptive HTML to (AI Friendly, structural) Markdown converter designed for extensibility and AoT compatibility.

It's the basis of a future StyloBot feature where it will auto generate any upstream page to markdown for AI scrapers automatically. This lets it be FAST!

#nuget #stylobot

Just released the StyloExtract packages https://www.nuget.org/packages?q=styloextract&includeComputedFrameworks=true&prerel=true&sortby=relevance

Really for internal use but someone might find them useful.
It's an adaptive HTML to (AI Friendly, structural) Markdown converter designed for extensibility and AoT compatibility.

It's the basis of a future StyloBot feature where it will auto generate any upstream page to markdown for AI scrapers automatically. This lets it be FAST!

#nuget #stylobot

Changes to NuGet package ids

nuget.org now requires new package IDs to use only ASCII letters, digits, dots, and dashes, similar to the conventions used by npm, PyPI, and other major registries. Existing packages and existing IDs remain available.

Enforced for new packages, and from 15th July for existing packages.

https://github.com/NuGet/Announcements/issues/75

#dotnet #nuget