For the 2nd time in weeks, Microsoft packages laced with credential stealer

Microsoft's official GitHub repository was compromised, allowing a credential-stealing code to be added to dozens of open-source packages, which were then used to infect developer machines.