Back to queenrose54's feed

For the 2nd time in weeks, Microsoft packages laced with credential stealer (opens in new tab) 🔸AWS

arstechnica.com··Lobsters, Hacker News·Covered in 8 articles·Covers: Miasma Worm Hits Microsoft Again: Azure Functions Action and 72 Other Repositories Disabled After Supply Chain Attack Targeting AI Coding Agents·Open original

73 packages run self-replicating stealer as soon as they're opened by an AI agent.

Read the original article

Sign in to keep reading the full article.

Covered in 8 articles

Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised

thenewstack.io·

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

Meta moves to hold NSO in contempt over WhatsApp attacks

metacurity.com·