In May 2026, a malicious version of a popular VS Code extension spent 18 minutes in the marketplace before anyone caught it. In that time it ran on roughly 6,000… The post How to detect credential theft in AI agent harness traces appeared first on Arize AI .