Typosquatted Newtonsoft.Json NuGet package rigs Digitain betting games
Researchers uncovered a NuGet typosquat—Newtonsoftt.Json.Net—that looks like the legit Newtonsoft.Json library but injects code to rig live Digitain crash‑game results and exfiltrate outcomes to an attacker server. Seven versions were published, downloaded ~1,200 times, and only activate when JsonConvert.DefaultSettings is set on targeted backend systems.