Microsoft's Azure SDK site tricked into listing fake package

A researcher was able to add a fake package to the official list of Microsoft Azure SDK latest releases. Using this, attackers can position their malicious package as part of the Azure SDK suite.