Back to user's feed

arstechnica.comNews

For the 2nd time in weeks, Microsoft packages laced with credential stealer (opens in new tab)

Covers Miasma Worm Hits Microsoft Again: Azure Functions Action and 72 Other Repositories Disabled After Supply Chain Attack Targeting AI Coding AgentsCovered by 8 sources including DEV Community, TechCrunchDiscussed on Hacker News and Lobsters

73 packages run self-replicating stealer as soon as they're opened by an AI agent.

Read the original article

Sign in to keep reading the full article.

Covered in 8 articles

DEV Community·

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

Discussed on DEV

Microsoft’s open source tools were hacked to steal passwords of AI developers

Discussed on Hacker News

The New Stack·

Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised