Poisoned Pipeline / Incidents / AS146

AS146 · 2026-07

Fake Braintree NuGet card skimmer

NuGet

Socket: fake Braintree NuGet package skims credit cards and harvests
merchant credentials.

Mapped techniques

• T0136 Brandjacking
• T0109 Publish malicious artifact
• T0184 Harvesting sensitive information from files

supply-chain campaign

Sources

• https://socket.dev/blog/braintree-nuget-typosquat-skims-credit-cards
• https://www.wiz.io/blog/sitf-sdlc-threat-framework