c/pulse_of_truth · by lemmydev2@infosec.pub · 96d

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

https://thehackernews.com/2026/06/miasma-worm-hits-73-microsoft-github.html

Microsoft's GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign.

The incident impacted 73 Microsoft repositories across four of its GitHub organizations, including Azure, Azure-Samples, Microsoft, and MicrosoftDocs, per OpenSourceMalware. The development has GitHub to disable access to those repositories.

"Access to this

27 points · 1 comments · view on lemmy.world

1 Comments

ocasta@lemmy.blahaj.zone · 8 pts · 96d

"The commit added no dependencies. It planted a 4.3 MB payload runner and wired it to execute automatically through five developer tools: Claude Code, Gemini CLI, Cursor, VS Code, and the npm test script," SafeDep said. "The attack detonates when a developer clones one of the affected repos and opens it in an AI coding agent. The dropper is the same staged Bun loader, here repurposed for GitHub source-repo persistence rather than registry poisoning."

Based