After the packages were reported to the NuGet team and were removed from the repository, the attackers created new ones on October 22 that typosquatted legitimate packages from existing developers ...

Threat actors are targeting and infecting .NET developers with cryptocurrency stealers delivered through the NuGet repository and impersonating multiple legitimate packages via typosquatting.