Microsoft Open-Source Tools Hacked to Steal AI Developers’ Passwords - Memeburn

▤ Summary

Microsoft temporarily pulled dozens of GitHub repositories after malware was found in developer tools tied to Azure and AI coding workflows. Security researchers say the Miasma worm could steal passwords, GitHub tokens, cloud credentials, and other secrets when infected projects were opened. The incident highlights how open-source repositories and AI-assisted development tools now sit inside the software supply chain. Teams that rely on GitHub, VS Code, Azure, and AI coding assistants should review whether they used affected content and rotate exposed credentials. The attack also shows that developer environments have become high-value targets for credential theft and broader infrastructure access.

▦ Linked Companies