Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI coding agents.

In all, multiple researchers said, 73 packages were flagged as malicious when automated systems on GitHub blocked them on the platform. Rather than noting they are malicious—and that developers who used AI agents to work with them should assume their systems are compromised—the Microsoft-owned GitHub said it disabled the packages “due to a violation of GitHub's terms of service.” The text went on to encourage the package owner to contact GitHub.

Devs: Assume compromise and proceed accordingly

It wasn’t until Monday that Microsoft even raised the possibility the packages were infected. In an email, the company stated: “We have temporarily removed some repositories as we investigate potential malicious content.”

Read full article

Comments

© Getty Images

Axiom Space unveiled the design of another element of the lunar spacesuit it is developing for NASA in partnership with luxury designer Prada.

The post Axiom and Prada advance design of spacesuit appeared first on SpaceNews.

L'été approche et les repas en plein air reviennent sur le devant de la scène. Si vous envisagez d'investir dans un barbecue à charbon, Cdiscount met actuellement en avant le Weber Compact Kettle à prix réduit. Avec sa cuve en acier émaillé et son format adapté aux repas conviviaux, ce modèle...

Selecionadas pela Startup Portugal e pela Unicorn Factory Lisboa, as 27 empresas vêm de sectores como IA, Machine Learning ou Tecnologia da Saúde, empregando mais de 200 pessoas e com investimentos captados superiores a 20 milhões de euros.

The post Web Summit Rio: 27 startups portuguesas rumam ao Brasil para explorar novas oportunidades de negócio appeared first on Tek Notícias.