TechCrunch - Microsoft open-source projects compromised to steal AI developer credentials

Evidence record

Read the original source ↗

Claim-level citations (6)

• supportsMicrosoft open-source repositories delivered credential-stealing malware into AI developer workflows: TechCrunch observed at least 70 Microsoft GitHub projects disabled while Microsoft investigated malicious content.

  SRC-TC-MS-OSS-JUN08

• supportsMicrosoft open-source repositories delivered credential-stealing malware into AI developer workflows: TechCrunch observed at least 70 Microsoft GitHub repositories disabled during the investigation, while Microsoft said only a small number of customers were notified as potentially having pulled affected content.

  SRC-TC-MS-OSS-JUN08

• supportsMicrosoft open-source repositories delivered credential-stealing malware into AI developer workflows: The public reporting did not establish how many developers downloaded malicious content or whether downstream credential theft produced confirmed secondary compromises.

  SRC-TC-MS-OSS-JUN08

• supportsMicrosoft open-source repositories delivered credential-stealing malware into AI developer workflows: Affected tools were used by developers inside AI coding environments including Claude Code and Gemini CLI; the AI tools were an execution context/target surface, not autonomous attackers.

  SRC-TC-MS-OSS-JUN08

• supportsMicrosoft open-source repositories delivered credential-stealing malware into AI developer workflows: The malicious code was planted in open-source projects and could steal passwords and other credentials when affected tools were opened through AI coding environments including Claude Code, Gemini CLI and VS Code.

  SRC-TC-MS-OSS-JUN08

• supportsMicrosoft open-source repositories delivered credential-stealing malware into AI developer workflows: The June incident included a reported re-compromise of Microsoft's Durable Task project after a related compromise had been identified in May, raising a persistence or repeat-access question.

  SRC-TC-MS-OSS-JUN08