Researchers at the Slovakian security firm ESET say they have discovered a new supply-chain attack that targets the update infrastructure of NoxPlayer, an Android emulator for PCs and Macs.