🧰 Microsoft durabletask

The items that name it 2

• And another one. GitHub ships break-glass credential revocation
  article2026-07-01It is written here as Microsoft durabletask (PyPI package).

  Three malicious versions pushed May 19 via stolen credentials.

• Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter
  writeup2026-06-09It is written here as Microsoft durabletask (PyPI).

  Previously compromised in the broader Shai-Hulud campaign, per StepSecurity's prior analysis.