Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
ID: f5f32ea5-71af-5b5d-97c0-a7c10eb651a6
STIX ID: report--f5f32ea5-71af-5b5d-97c0-a7c10eb651a6
Feed Name: The Hacker News
Microsoft confirmed it temporarily removed and reviewed multiple GitHub repositories after a supply-chain campaign (Miasma / Hades / Shai-Hulud waves) compromised 73 open-source projects and additional PyPI packages to inject an information stealer. The malicious payloads target developers and CI/CD systems to harvest and exfiltrate secrets, using varied delivery methods (executable .pth startup hooks, trojanized native .abi3.so extensions, and separated loader/payload designs) and include adversarial prompt injection to evade AI-powered scanners and analyst copilots.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.