Microsoft’s open source tools were hacked to steal passwords of AI developers

Microsoft temporarily removed and disabled dozens of its open-source GitHub repositories after security researchers flagged injected password-stealing malware in projects used for Azure and AI developer tooling. At least 70 Microsoft projects were taken offline while investigations continue; the incident appears related to a recent re-compromise of the Durable Task project and represents a supply-chain style attempt to harvest user credentials when compromised tools are opened.