For the 2nd time in weeks, Microsoft packages laced with credential stealer

Malicious npm packages target AI agents with credential-stealing payloads twice.

“73 packages run self-replicating stealer as soon as they're opened by an AI agent.”