For the 2nd time in weeks, Microsoft packages laced with credential stealer

Researchers have found 73 packages that, when opened by an AI agent, launch a self-replicating credential stealer. The packages, distributed by Microsoft, embed the malware and raise security concerns.

Summary written by Kernelia from the original article by Ars Technica — AI. The story and its rights belong to its author.