MALICIOUS STRIPEAPI NUGET PACKAGE MIMICKED OFFICIAL LIBRARY AND STOLE API TOKENS

Summary from the TLDR InfoSec newsletter

A typosquatted NuGet package named "StripeApi.Net" impersonated the legitimate Stripe.net library with artificially inflated download counts (~180K across 506 versions) and silently exfiltrated Stripe API tokens while maintaining full payment processing functionality to avoid detection.