For the 2nd time in weeks, Microsoft packages laced with credential stealer

arstechnica.com · · Covered in 8 articles from 8 sources

Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised

thenewstack.io·

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

Meta moves to hold NSO in contempt over WhatsApp attacks

metacurity.com·

Roundup of links for 9 Jun.

ideatrash.net·

Why Microsoft yanked its own code

Microsoft’s open source tools were hacked to steal passwords of AI developers

techcrunch.com··Hacker News

In other languages

Chat已死」OpenAI想把ChatGPT变成赚钱入口，苹果Siri大脑却交给了谷歌

ai-digest.liziran.com·

마이크로소프트 패키지 및 Lucid 악성코드, 개발자 자격 증명 탈취 시도

kite.kagi.com·