You are SO right. Just so happen, I got a notification on my phone from the Galaxy Store that "Play Music - MP3 Music Player" has an available update. I cringe at the thought of what could be the result of performing this bogus update. And No, I don't even have an app resembling that name on my phone but, still. I'm glad I logged in and saw your post yesterday. This IS NOT cool. How did you discover the package name match with NetGuard? Good catch and thanks for alerting us. This kinda scary.
NOTE to ALL. This is a good reason NOT to have any App Store set to Auto-Update your Apps.