computer-science
Microsoft’s open source tools were hacked to steal passwords of AI developers
Key takeaways
- Microsoft has cut off access to dozens of its open-source projects hosted on Git Hub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code.
- Many of the affected projects relate to Microsoft s cloud service Azure and other tools used by developers to code with AI development apps, such as Claude Code, Gemini s command line interface, and VS Code.
- It s not immediately known how many people have downloaded the affected tools.
Microsoft has cut off access to dozens of its open-source projects hosted on Git Hub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code.
Many of the affected projects relate to Microsoft s cloud service Azure and other tools used by developers to code with AI development apps, such as Claude Code, Gemini s command line interface, and VS Code.
According to security firm Cloudsmith and community-driven malware analysis site Open SourceMalware, who were some of the first to flag the hack, the malware allowed the hackers to steal the user s passwords and other sensitive credentials when they opened the compromised tools in their AI coding apps.
Article preview — originally published by TechCrunch. Full story at the source.
Read full story on TechCrunch →
More top stories
Also covered by
Aggregated and edited by the Scoop newsroom. We surface news from TechCrunch alongside other reporting so you can compare coverage in one place.
Editorial policy · Corrections · About Scoop