
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
github.com/Microsoft/BikeSharing360_MobileApps
Advanced tools
During our Connect(); event this year we presented 15 demos in Scott Guthrie’s and Scott Hanselman’s keynotes. If you missed the keynotes, you can watch the recording in Channel 9.
This year, we built the technology stack for a fictional company named BikeSharing360, which allows users to rent bikes from one location to another.
BikeSharing360 is a fictitious example of a smart bike sharing system with 10,000 bikes distributed in 650 stations located throughout New York City and Seattle. Their vision is to provide a modern and personalized experience to riders and to run their business with intelligence.
In this demo scenario, we built several apps for both the enterprise and the consumer (bike riders). You can find all other BikeSharing360 repos in the following locations:
This repository contains the BikeRider consumer-facing mobile apps for renting bikes and the BikeSharing360 maintenance app built with Cordova.
Note: This document is about the Xamarin apps. For the Cordova app click here.
The BikeRider app is available for three platforms:
BikeRider features 93.7% code share across all platforms (7.34% iOS / 8.61% Android / 2.72% Windows).
Xamarin.Forms allows you to build native UIs for iOS, Android, and Windows from a single, shared codebase. You can dive into mobile development with Xamarin.Forms by following our free self-guided learning from Xamarin University. This project exercises the following patterns and features:
This project uses some third-party assets with a license that requires attribution:
Download or clone the repository. This is a solution with seven projects.
Rebuild the solution to get all neccesary NuGet packages.
Access to GlobalSettings.cs file available in the Portable Class Library to introduce your Azure endpoints and APIs keys.
Deploy to Azure
Use the Backend Services repository to deploy backend services for Xamarin App to your subscription.
Enjoy!
You need an Azure account to work with this demo code. You can:
Here's links to blog posts related to this project:
If you see build issues when pulling updates from the repo, try cleaning and rebuilding the solution.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.