Suspicious NuGet package harvests information from industrial systems