ReversingLabs uncovered three additional malevolent packages believed to be part of the campaign