HomeAI · summaries
Storia in 7 fonti
Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories
The attacks stemmed from a GitHub account that was also compromised in a previous Miasma attack on Microsoft last month.
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
theregister.com
GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections
Miasma worm shapeshifts, but cloud secret-scouting remains the goal
- ·
dev.to
The Miasma Worm: How AI Coding Agents Became a Supply Chain Attack Surface
Microsoft just had 73 GitHub repositories — including the Azure Functions Action — disabled after a...
- ·
securityweek.com
Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks
Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack variants.
- ·
thehackernews.com
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
Microsoft confirms it temporarily removed GitHub repos after Miasma worm compromised 73 of its open-source projects to inject an information stealer.
- ·
Miasma worms its way onto GitHub as attack kit goes open source
As if there weren't enough package poisonings to worry about
- ·
Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.
73 cryptographically signed npm packages from Microsoft were compromised last week with advanced...
- ·
neowin.net
Microsoft had to shut down 70+ GitHub repos after getting hacked, brings back some
Microsoft had to disable more than 70 GitHub repos this week after a nasty password-stealing malware infected them.
- ·
darkreading.com
Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories
The attacks stemmed from a GitHub account that was also compromised in a previous Miasma attack on Microsoft last month.
- ·
If the Shai-Hulud worm reached your GitHub repos, please read this
The Miasma / Shai-Hulud worm is still live in many GitHub repositories. How to tell if you were hit, clean up safely, and what to do if you are locked out.
- ·
bleepingcomputer.com
The ‘Miasma’ worm source code briefly leaked on GitHub
The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.