Security News Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets TheHackerNews Daniel Bender 29 May 2026 Share Malicious Sicoob.Sdk stole PFX certificates and client IDs via NuGet downloads, enabling API impersonation and payment abuse risks.