73 Malicious npm Packages Deploy Credential Stealer via AI Agent Execution

A second wave of malicious Microsoft-ecosystem packages on npm — 73 in total — executes a self-replicating credential stealer the moment an AI agent opens them, requiring no user interaction. This follows a similar incident weeks prior, suggesting targeted exploitation of agentic pipelines that auto-install or inspect packages.