Miasma worm infects 73 Microsoft GitHub repositories

Key facts

• The Miasma worm has infected 73 Microsoft GitHub repositories.
• The affected repositories are within Azure, Azure-Samples, Microsoft, and MicrosoftDocs organizations.
• Malicious code was planted to harvest developer credentials.
• GitHub disabled the compromised repositories.

The self-replicating Miasma worm has infiltrated 73 Microsoft GitHub repositories across four organizations: Azure, Azure-Samples, Microsoft, and MicrosoftDocs. GitHub has disabled these repositories after the worm embedded malicious code aimed at harvesting developer credentials. This incident represents a significant escalation in ongoing supply chain attacks targeting the open-source ecosystem.