Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
Summary: Microsoft confirmed it temporarily removed some GitHub repositories while investigating a security incident that compromised 73 of its open-source projects to inject an information stealer, and said some repos have been restored while others may remain offline. The Miasma campaign's payload can trigger automatic code execution when a developer opens an affected repository in an AI-powered coding tool or IDE, and a newer PyPI wave tied to the Mini Shai-Hulud, Miasma, and Hades activity infected an additional 23 packages, including typosquats such as rsquests, tlask, and rlask.
Key Takeaway: The malware targets developer workstations and CI/CD environments to harvest high-value secrets and exfiltrate them to a public GitHub repository, and one bioinformatics package carries an adversarial prompt injection in a JavaScript block comment meant to derail AI-powered scanners and analyst copilots.
Read the original at The Hacker News ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026