Popular open source project Moq criticized for quietly collecting data

stapp · Aug 11, 2023

Open source project Moq (pronounced "Mock") has drawn sharp criticism for quietly including a controversial dependency in its latest release.
Distributed on the NuGet software registry, Moq sees over 100,000 downloads on any given day, and has been downloaded over 476 million times over the course of its lifetime.

Seemingly an open-source project, SponsorLink is actually shipped on NuGet as closed source and contains obfuscated DLLs that collect hashes of user email addresses and send these to SponsorLink's CDN, raising privacy concerns.[/QUOTE}
https://www.bleepingcomputer.com/ne...t-moq-criticized-for-quietly-collecting-data/

More info/complaints from users here
https://github.com/moq/moq/issues/1372
Click to expand...

Log in or Sign up

Popular open source project Moq criticized for quietly collecting data

stapp Global Moderator

Log in or Sign up

Popular open source project Moq criticized for quietly collecting data

stapp Global Moderator

Useful Searches