Industrial computing systems at risk from "time bombs " in malicious NuGet packages

Phone malware.

• Socket found nine NuGet packages with delayed sabotage targeting industrial control systems
• Sharp7Extend can corrupt Siemens S7 PLCs and randomly crash host processes
• Malicious code activates in 2027–2028; users urged to audit and remove affected packages

Thousands of critical infrastructure organizations, as well as those working in other, equally important verticals, were targeted by a perfidious attack that sought to sabotage their industrial control devices (ICD) two years down the line, experts have discovered.