Post

There seems to be an ongoing supply chain attack or suspicious activity on NuGet .org, where a user called darklord is trying to gain legitimacy or something by sending thousands of become owner of their packages requests, don't accept, report to @nuget.org #dotnet #nuget

15 reposts12 likes

Yeah curious too, unless they found some issue in the service or way to extract information post acceptance. Would be interesting to see the post mortem of this.