MSC-2026-5232

Malicious NuGet packages impersonate legitimate .NET UI and infrastructure libraries and deliver a .NET Reactor–obfuscated infostealer via module initializers. The payload automatically executes on load and exfiltrates browser credentials, cryptocurrency wallets, SSH keys, and local files to an...