A recent campaign targets .NET developers attempting to infect them with crypto stealers by impersonating legitimate packages.
The number of downloads of those malicious packages got over 150,000 in a month, possibly due to attackers trying to make the packages look legit.
Hackers use typosquatting to both impersonate packages and themselves as Microsoft developers working on the NuGet .NET package manager.