ReversingLabs Threat Researcher Petar Kirhmajer published a blog post detailing the research team’s findings on Tuesday.

Threat hunters have identified a suspicious package in the NuGet package manager that's likely designed to target developers working with tools made by a Chinese firm that specializes in industrial- and digital equipment manufacturing.

A suspicious NuGet package likely targets developers working with technology from Chinese firm Bozhon.

The software supply chain attack campaign has been codenamed BIPClip by ReversingLabs. The packages were collectively downloaded 7,451 times prior to them being removed from PyPI.

Researchers discover seven crypto-draining packages

ReversingLabs has uncovered a nefarious hacking campaign aimed at pilfering cryptocurrency wallet recovery phrases