Security researchers have discovered credential-stealing malware in dozens of Microsoft open-source software packages. On ...