Malicious packages infecting AI agent workflows have been discovered on Microsoft's registry for the second time in recent weeks. These packages exploit AI agent environments by executing credential-stealing malware immediately upon installation, posing a significant security risk to developers and their projects.
Opening Kapyn…