Attackers are Targeting .NET Developers With Malicious NuGet Packages

The discovered packages – which were downloaded 150K times over the past month (before they were removed from the NuGet repository) – contained a “download & execute” type of payload.