Tag: SQLServer
-
2027 Time Bomb: Covert NuGet Packages Target SQL and PLCs with Scheduled Sabotage
Researchers discovered several NuGet packages in the public registry that conceal covert sabotage code scheduled to activate in 2027 and 2028. The tainted packages target three popular .NET data engines—Microsoft SQL Server, PostgreSQL, and SQLite—and one component is deliberately disguised as a library for interfacing with Siemens S7 PLCs. Analysts at Socket identified nine packages…