Microsoft's AI packages have been compromised for the second time in recent weeks, with 73 packages containing a credential-stealing malware. This malicious software activates as soon as an AI agent opens the compromised packages. The discovery highlights a recurring vulnerability in the distribution of AI-related software components. AI
IMPACT Compromised AI packages pose a direct risk to AI agents and their data, potentially disrupting operations and leading to data breaches.
RANK_REASON This is a security vulnerability affecting software packages, not a core AI model release or research.
Read on Mastodon — fosstodon.org →
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →