Suspicious NuGet package grabs data from industrial systems

ReversingLabs discovered a suspicious NuGet package, SqzrFramework480, containing a .NET library (SqzrFramework480.dll) that continuously takes screenshots and sends them via sockets to a remote IP; the package appears tailored to BOZHON industrial/vision tooling and may be a supply-chain espionage attempt, though researchers could not definitively attribute or confirm active exploitation and the package remains available with thousands of downloads.