The record
Written from the 1 report below. Nothing here is unsourced.
- Researchers at JFrog found a fake NuGet package, 'Newtonsoftt.Json.Net,' that poses as the popular Newtonsoft.Json library but secretly rigs live results of Digitain's FG-Crash betting game.
- The malicious code only activates on systems running Digitain's backend, so other developers who installed it by typo got a fully working JSON library with no obvious signs of malware.
- Seven versions were published between August and October 2025 and downloaded about 1,200 times, with rigged results exfiltrated to an attacker-controlled server.
- Digitain says it was aware of the issue and has taken steps to fix it, but the full extent of exposure is not yet known.
What to watch next
- Details from Digitain on the full extent of the exposure and whether rigged results affected real bets
- Whether NuGet fully removes the package artifacts or other trojanized versions surface
- Any enforcement or legal action identifying the package owner 'MagicalPuff96'
Coverage1
1 report
English national1
All filed from India
Named India
The 1 report is listed beside the record.
Ask this story
Answers cite the reports above, or say they can't.