# .NET developers alert: Moq NuGET package exfiltrates user emails from git

DevFeed: [.NET developers alert: Moq NuGET package exfiltrates user emails from git](<https://devfeed.tech/articles/net-developers-alert-moq-nuget-package-exfiltrates-user-emails-from-git-8021.md>)

Original publisher: [Read original article](<https://snyk.io/blog/moq-package-exfiltrates-user-emails/>)

Author: Liran Tal

Published: 2023-08-09T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [NuGet](<https://devfeed.tech/topics/nuget.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Mocking](<https://devfeed.tech/topics/mocking.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [pii](<https://devfeed.tech/topics/pii.md>), [Security](<https://devfeed.tech/topics/security.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Git](<https://devfeed.tech/topics/git.md>), [Azure](<https://devfeed.tech/topics/azure.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [blog](<https://devfeed.tech/tags/blog.md>), [capture](<https://devfeed.tech/tags/capture.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [dot-net](<https://devfeed.tech/tags/dot-net.md>), [git](<https://devfeed.tech/tags/git.md>), [mocking](<https://devfeed.tech/tags/mocking.md>), [net](<https://devfeed.tech/tags/net.md>), [nuget](<https://devfeed.tech/tags/nuget.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [pii](<https://devfeed.tech/tags/pii.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [testing](<https://devfeed.tech/tags/testing.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article reports that Moq, a widely used .NET mocking library, began exfiltrating developers' configured Git email addresses starting with version 4.20.0. The data was hashed into an HTTP request to Azure blob storage and shared with a third-party SponsorLink service. Snyk frames the incident as an open-source software supply-chain security and package-health concern.

## Source excerpt

On August 8th 2023, the .NET community was made aware that the testing library called Moq exfiltrates developers emails from their development machine, and sends them off to third-party remote servers.