Malicious NuGet Package Linked to Industrial Espionage Targets Developers

Threat researchers identified a malicious NuGet package, SqzrFramework480, which contained a DLL that continuously captured screenshots, performed heartbeat pings to a remote IP, and transmitted images over a socket; analysts believe it may be aimed at industrial systems (cameras, machine vision, robotic arms) for espionage purposes. The package was downloaded ~2,999 times before being removed from NuGet, and while researchers note plausible benign explanations, the combination of behaviors is considered suspicious.