Currently, malicious actors are embedding telemetry miners and brick code into fake NSP files listed on scraper sites. If a "Current Page" looks more than 6 months old or hosts files on ad-ridden shorteners, assume the NSP is a virus.
Here is a deep feature breakdown of the modern NSP List, how it functions, and the hidden data hierarchy it reveals. Current Page- Nintendo Switch NSP List