Back to 2601's feed

For the 2nd time in weeks, Microsoft packages laced with credential stealer (opens in new tab) 📦Dependency Analysis Content type: News 8 articles covering this post

arstechnica.com··Lobsters, Hacker News·Covered by dev.to + 7 more·Covers: Miasma Worm Hits Microsoft Again: Azure Functions Action and 72 Other Repositories Disabled After Supply Chain Attack Targeting AI Coding Agents·Open original

73 packages run self-replicating stealer as soon as they're opened by an AI agent.

Read the original article

Sign in to keep reading the full article.

Covered in 8 articles

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

Microsoft’s open source tools were hacked to steal passwords of AI developers

techcrunch.com··Hacker News

Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised

thenewstack.io·