arstechnica.com › security › 2026 › … For the 2nd time in weeks, Microsoft packages laced with credential stealer … It’s essentially a clone of TeamPCP’s Mini Shai-Hulud toolkit, which the threat actor open-sourced recently. … Jun 8, 2026 · Dan Goodin