Microsoft’s cloud-native, distributed application development tool kit drops .NET from its name and embraces, well, ...

Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.