TLDRs
- Microsoft investigates GitHub breach targeting Azure AI development tools.
- Hackers injected malware stealing developer passwords and credentials.
- At least 70 Microsoft repositories were temporarily disabled.
- Supply chain attack raises concerns over AI developer security risks.
Microsoft is investigating a major security incident after hackers reportedly compromised several of its open source GitHub repositories and injected malicious code designed to steal passwords and sensitive credentials from developers using AI-powered coding tools. The breach has raised fresh concerns about supply chain attacks targeting widely used development infrastructure, particularly within cloud and AI ecosystems tied to Microsoft Azure.
At least dozens of repositories linked to Microsoft’s Azure ecosystem and developer toolchain have been temporarily taken offline as the company works to contain the issue and assess the extent of exposure.
Repositories Taken Offline
Microsoft confirmed that it had “temporarily removed some repositories” while it investigated suspected malicious content. The decision follows reports from security researchers that attackers successfully embedded password-stealing malware into multiple open source projects hosted on GitHub, a platform owned by Microsoft.
According to messages displayed on affected repositories, at least 70 projects have been disabled, with access blocked due to violations of GitHub’s terms of service. Some repositories have since been restored after review, but others remain offline as investigations continue.
The affected codebases are largely associated with Azure services and development tools commonly used by software engineers working with AI applications such as VS Code extensions and command-line interfaces for models like Claude Code and Google’s Gemini tools.
AI Developer Credentials Targeted
Security researchers from Cloudsmith and OpenSourceMalware were among the first to identify the malicious activity. Their analysis indicates that the injected malware was designed to capture sensitive data, including developer passwords and authentication tokens, when the compromised tools were executed within AI coding environments.
This type of attack is particularly dangerous because modern AI development tools often integrate directly into local environments and cloud systems, where credentials and API keys are frequently stored or accessed automatically.
While Microsoft has not confirmed the exact number of users affected, it acknowledged that a small group of customers may have downloaded compromised content. Those users have reportedly been contacted directly through official support channels.
Supply Chain Attack Concerns Rise
The incident highlights a growing wave of supply chain attacks targeting open source ecosystems. Unlike traditional cyberattacks that directly target end users, supply chain attacks exploit trusted software components, injecting malicious code into widely distributed repositories.
Once compromised, these packages can silently spread across thousands of systems, particularly in developer-heavy environments where open source tools are routinely installed and updated without strict verification.
Security experts warn that AI development platforms are especially attractive targets due to their deep integration with cloud infrastructure and sensitive authentication systems.
Microsoft Investigates Repeat Breach
This is not the first time Microsoft’s open source ecosystem has been targeted in recent weeks. Reports suggest that a related breach occurred in mid-May involving the Durable Task framework, a tool used to build distributed applications. Analysts believe the latest incident may either be a continuation of that compromise or a separate attack exploiting similar weaknesses.
Microsoft has stated it is actively reviewing the situation and working to restore affected repositories where possible. A company spokesperson emphasized that investigations are ongoing and that further updates will be shared if additional customer action is required.
Industry Impact and Outlook
The breach underscores the increasing security risks facing large-scale software ecosystems that rely heavily on open source collaboration. As AI development accelerates and more tools become interconnected with cloud infrastructure, the attack surface continues to expand.
For Microsoft, the incident adds pressure to strengthen safeguards across its GitHub-hosted projects, especially those tied to Azure and AI development workflows. For developers, it serves as a reminder of the importance of verifying dependencies and monitoring for unusual behavior in widely trusted repositories.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
