npm/PyPI Credential-Stealing Packages: The Supply-Chain Threat Hardening Closes
Microsoft npm packages were laced with a credential stealer for the second time in weeks. AI-built projects pulling packages without integrity controls are an active credential-theft target.





