CREDENTIALS 3 PyPI urges users to reset credentials after new phishing attacks Sep 23, 2025 40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials Sep 16, 2025 Azure AD Credentials Exposed in Public App Settings File Sep 2, 2025