Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

One of the worst things people in education can do around AI is nothing,” said Naomi Hughes, a media specialist in Rochester, ...