Cybersecurity researchers have uncovered a malicious NuGet package designed to impersonate a legitimate Stripe library and quietly steal sensitive data from developers in the financial sector. The package, named StripeApi.Net, masqueraded as Stripe.net, a widely used official library from Stripe with over 75 million downloads, and closely copied its icon, documentation, and functionality to avoid suspicion on the NuGet Gallery. According to ReversingLabs, the typosquatted package secretly modified key methods to exfiltrate Stripe API tokens while allowing applications to compile and process payments normally, and its author artificially inflated downloads across hundreds of versions to appear popular before it was detected and removed.
Relevant URL: https://thehackernews.com/2026/02/malicious-stripeapi-nuget-package.html
