#8
Ars Technica Security
general
June 08, 2026 at 18:34 UTC
For the 2nd time in weeks, Microsoft packages laced with credential stealer
By Dan Goodin
AI Summary
For the second time in weeks, malicious packages targeting the Microsoft ecosystem were found laced with a credential stealer — 73 packages that execute a self-replicating stealer automatically when opened by an AI coding agent. The attack exploits the growing use of AI-assisted development workflows where agents autonomously install and execute packages. This pattern of recurring supply chain attacks against Microsoft package repositories represents an escalating threat to developer environments.
Relevance score: 80.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →