m365

This is setup documentation for authenticating the Microsoft 365 CLI with an Azure AD client secret. It does not itself demonstrate malware, but it creates a significant credential-handling and privilege risk: users are instructed to provide a reusable client secret and grant broad Microsoft 365 application permissions. The secret should not be shared in chat or exposed on the command line; use a secure secret store, minimize permissions, verify the package provenance, and review CLI credential storage before proceeding.