Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

A typosquatted version of the Newtonsoft.Json library has been discovered, designed to rig live game results on Digitain, an online betting platform. The package, disguised as a legitimate library, exfiltrates rigged data to a command-and-control server. Researchers found seven versions of the package, with the author…