Malicious Microsoft durabletask PyPI Versions (1.4.1–1.4.3) Deploy Linux Wiper, Steal Cloud Credentials
A supply chain attack against Microsoft’s durabletask Python package has injected a covert payload into three PyPI releases, security researchers disclosed on May 20, 2026. The malicious...