Case · DiggingBeagle record
Microsoft temporarily removed dozens of compromised GitHub repositories after attackers injected credential-stealing malware into open-source tools used in Azure and AI-development workflows. TechCrunch reported at least 70 repositories disabled; Microsoft said a small number of customers who may have pulled affected content were notified.
Treat as a software supply-chain compromise intersecting AI developer tooling, not as an AI-agent attack.
Locator: SRC-TC-MS-OSS-JUN08
TechCrunch observed at least 70 Microsoft GitHub projects disabled while Microsoft investigated malicious content.
Locator: SRC-TC-MS-OSS-JUN08
TechCrunch observed at least 70 Microsoft GitHub repositories disabled during the investigation, while Microsoft said only a small number of customers were notified as potentially having pulled affected content.
Locator: SRC-TC-MS-OSS-JUN08
The public reporting did not establish how many developers downloaded malicious content or whether downstream credential theft produced confirmed secondary compromises.
Locator: SRC-TC-MS-OSS-JUN08
Affected tools were used by developers inside AI coding environments including Claude Code and Gemini CLI; the AI tools were an execution context/target surface, not autonomous attackers.
Locator: SRC-TC-MS-OSS-JUN08
The malicious code was planted in open-source projects and could steal passwords and other credentials when affected tools were opened through AI coding environments including Claude Code, Gemini CLI and VS Code.
Scope: TechCrunch attributes the re-compromise characterization to OpenSourceMalware; Microsoft did not publicly establish whether the same actor retained access.
Locator: SRC-TC-MS-OSS-JUN08
The June incident included a reported re-compromise of Microsoft's Durable Task project after a related compromise had been identified in May, raising a persistence or repeat-access question.
DiggingBeagle. “Microsoft open-source repositories delivered credential-stealing malware into AI developer workflows.” First seen Jun 8, 2026. https://diggingbeagle.com/cases/microsoft-open-source-repositories-delivered-credential-stealing-malware-into-ai/
Citation guidanceWhy this archive exists
DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.
We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.