Microsoft shuts down 70+ GitHub repos after Miasma malware infection, begins restoring them
By
Aditya Tiwari
A respectable bake. You'd come back tomorrow for another.
Summary
Microsoft was forced to shut down over 70 GitHub repositories after a self-replicating malware campaign called Miasma infected them with password-stealing code. The affected repos span multiple Microsoft organizations including Azure, Azure-Samples, Microsoft, and MicrosoftDocs. Microsoft has since begun restoring some of the compromised repositories.
Key quotes
· 4 pulledThe self-replicating malware campaign known as Miasma took the open-source world by storm.
Almost 73 Microsoft GitHub repositories were infected by the worm and had to be temporarily shut down.
These GitHub repos span across different organizations, including Microsoft Azure, Azure-Samples, Microsoft, and MicrosoftDocs.
The malware enabled attackers to steal password-stealing malware in the code.
You might also wanna read
GitHub confirms breach of 3,800 repos via malicious VSCode extension
Microsoft bans security researcher from GitHub after zero-day exploit posts; researcher threatens retaliation
A security researcher known as Nightmare-Eclipse (Chaotic Eclipse) has been banned from Microsoft's GitHub platform after allegedly posting
tomshardware.com·11d agoMicrosoft bans security researcher from GitHub after zero-day exploit posts; researcher threatens retaliation
A security researcher known as Nightmare-Eclipse (Chaotic Eclipse) has been banned from Microsoft's GitHub platform after allegedly posting
tomshardware.com·11d ago
Microsoft's PlayReady DRM Security Breach Leads to GitHub Takedown and Amazon Account Suspensions
The article discusses a security breach involving Microsoft's PlayReady DRM, a key technology used by major streaming services like Disney+,
torrentfreak.com·10mo ago
GitHub's Decline and the Decay of Software Infrastructure: A Critical Analysis
A critical analysis of GitHub's decline in reliability, security, and performance, framed as a symptom of broader infrastructural decay in t
eblog.fly.dev·7d agoGitHub's Decline and the Decay of Software Infrastructure: A Critical Analysis
A critical analysis of GitHub's decline in reliability, security, and performance, framed as a symptom of broader infrastructural decay in t
eblog.fly.dev·7d ago
Post-mortem Analysis of @ctrl/tinycolor npm Supply Chain Attack via GitHub Actions
A detailed post-mortem analysis of a supply chain attack on the @ctrl/tinycolor npm package. The attack occurred when a malicious GitHub Act
sigh.dev·8mo ago
GitHub Experiencing Widespread Service Outage Affecting Repository Access
GitHub is experiencing a widespread outage affecting multiple users and organizations, with users reporting fatal errors when trying to acce
news.ycombinator.com·6mo ago