GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections
ID: dc9066cc-ab4a-5f10-93f5-6e9bcb844c9d
STIX ID: report--dc9066cc-ab4a-5f10-93f5-6e9bcb844c9d
Feed Name: The Register (Security)
Threat Score
A worm named Miasma (related to the Mini Shai Hulud family) compromised open-source projects and a contributor account to push malicious commits that triggered remote code execution in developer environments and installed infostealers to harvest cloud secrets and developer tooling data; Microsoft disabled 73 GitHub repositories after detections and CI/CD pipelines were disrupted, and the worm also affected PyPI and npm packages.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.