Access to over 70 of Microsoft's open source projects on GitHub has been suspended as the company investigates a breach involving password-stealing malware. The affected projects primarily support Microsoft’s Azure cloud service and tools related to AI development, including Claude Code and Gemini’s command line interface.
Security firms Cloudsmith and OpenSourceMalware first reported the incident, revealing that the malware could compromise user credentials when the infected tools were used. Microsoft has confirmed the removal of certain repositories while it assesses the situation. According to a spokesperson, some projects have been restored, but others may remain inaccessible during ongoing investigations.
Microsoft has reached out to a limited number of customers who might have downloaded the compromised content. However, the specific number of affected users has not been disclosed. This incident highlights a troubling trend of supply chain attacks targeting popular open source projects, which can expose a wide user base to significant risks.