Tech article

For the 2nd time in weeks, Microsoft packages laced with credential stealer

73 packages run self-replicating stealer as soon as they're opened by an AI agent.

Ars Technica | Jun 8, 2026 | Dan Goodin

Read the original article