Back Feeds.4Sysops

Miasma worm compromises Microsoft GitHub repositories via AI coding tools

Feeds.4Sysops •IT News • June 9, 2026

Microsoft has temporarily disabled 73 of its GitHub repositories across organizations like Azure and MicrosoftDocs following a compromise by the self-replicating Miasma worm. The attack utilized compromised contributor credentials to inject malicious code into critical projects, including the Azure durabletask Python package. This incident represents a significant escalation in a broader supply chain campaign targeting the open-source ecosystem and developer environments. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group, resulted in the exfiltration of approximately 3,800 internal repositories. GitHub's initial assessment indicated that the breach did not affect customer data stored outside its internal systems. The malicious extension was promptly removed, and GitHub initiated an incident response, including credential rotation. TeamPCP is reportedly offering the stolen data for sale on cybercrime forums, demanding at least $50,000. The breach highlights vulnerabilities in developer tools and the potential for significant impacts on software supply chains. GitHub is continuing to monitor for any follow-on activity as the investigation progresses. 149 sources 68

Extracted Entities

Miasma worm compromises Microsoft GitHub repositories via AI coding tools

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Malware (1)

MITRE ATT&CK (2)

Platforms (1)