Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.

AI language models can be secretly trained to steal credentials when triggered by a specific phrase. Here's what the research shows, why safety training can't stop it, and where the $414M AI security ...