en.Wedoany.com Reported - Microsoft has cut off access to dozens of open-source projects hosted on GitHub and is investigating how hackers infiltrated these projects and injected password-stealing malware into the code.

Many of the affected projects are related to Microsoft's cloud service Azure and other application tools used for AI development, including Claude Code, Gemini Command Line Interface, and VS Code. Security firm Cloudsmith and the community-driven malware analysis website OpenSourceMalware were among the first to detect the hack. The malware allows hackers to steal passwords and other sensitive credentials when users open compromised tools in AI coding applications.

It is currently unclear how many people have downloaded the affected tools. Microsoft spokesperson Ben Hope told TechCrunch that the company "temporarily removed some repositories while investigating potential malicious content." He also mentioned that some repositories have been restored after review, while others may remain offline as the investigation continues. Microsoft has notified a small number of customers who may have pulled content from the affected repositories and will contact them directly through established support channels. Microsoft did not immediately provide the specific number of affected customers. According to messages displayed when attempting to access project pages on GitHub, at least 70 projects belonging to Microsoft have been disabled. The message states: "This repository has been disabled by GitHub staff due to a violation of GitHub's Terms of Service."

This is the latest case in recent months where hackers have infiltrated open-source projects to implant malware. Such attacks are often referred to as "supply chain" attacks because they target code widely used in a large number of software products or by specific user groups, allowing hackers to gain access to cloud systems and large amounts of customer data through compromised code.

It is not uncommon for independent developers to be targeted by hackers, but it is relatively rare for a large tech giant like Microsoft, which has defensive resources, to be compromised. This is the second known attack in the past few weeks where Microsoft allowed hackers to infiltrate its open-source projects. In mid-May, security researchers stated that Microsoft's open-source project Durable Task was compromised. OpenSourceMalware noted that the latest Microsoft incident is a "re-infection" of the Durable Task project, suggesting that Microsoft may not have completely eradicated the hackers in the first attempt, or that this is a new, different intrusion.

This article is compiled by Wedoany. All AI citations must indicate the source as "Wedoany". If there is any infringement or other issues, please notify us promptly, and we will modify or delete it accordingly. Email: news@wedoany.com