Microsoft successfully hit by dependency hijacking again