Hackers infiltrated Microsoft's open-source projects on GitHub, embedding password-stealing malware into the code, prompting Microsoft to suspend access to dozens of repositories.

GitHub disabled 73 Microsoft repos after the Miasma worm exploited previously compromised credentials to plant malware targeting AI coding agents.

Miasma worm shapeshifts, but cloud secret-scouting remains the goal