A rogue NuGet package impersonating the Sicoob banking SDK secretly exfiltrated certificate credentials and transaction data to a legitimate telemetry…