| Microsoft's open source tools were hacked to steal passwords of AI developers(techcrunch.com) | |
| 538 points by raffael_de 2 days ago | 185 comments | |
tl;dr: Microsoft disabled at least 70 of its GitHub repositories—many related to Azure and AI coding tools like Claude Code, Gemini CLI, and VS Code—after hackers injected password-stealing malware targeting developers who used them. The company confirmed the takedown and notified affected customers, though it hasn't disclosed how many were impacted. Researchers say this appears to be a re-compromise of Microsoft's Durable Task project, which was breached in a similar supply-chain attack in mid-May. | |
HN Discussion:
| |