73 packages run self-replicating stealer as soon as they're opened by an AI agent.