安全攻防 None 恶意 Sicoob NuGet 窃取银行凭证，因为 npm 软件包的目标是云秘密 Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit fo that Sicoob PFX 2026-05-29 info@thehackernews.com (The Hacker News)