Bottom Line: Microsoft disabled 73 GitHub repositories following a compromise by the Miasma worm, responding to a direct supply-chain attack on its developer infrastructure.
Microsoft has temporarily disabled 73 software projects on GitHub after a security incident. The compromise is attributed to the Miasma worm, which represents a supply-chain attack.
Microsoft has announced the disabling of 73 software projects on GitHub. According to security researchers, the affected repositories were compromised by the Miasma worm. The worm is classified as malware specifically designed for supply-chain attacks.
For CISOs, this attack poses significant supply-chain risk: if Microsoft projects on GitHub are infected with malware, downstream developers and organizations could potentially integrate compromised code dependencies into their own systems. This is particularly critical for open-source packages and libraries that are automatically pulled into CI/CD pipelines.
The disabling of the 73 projects is an emergency measure to prevent further spread. CISOs should verify whether their organizations depend on the affected Microsoft repositories and examine them for anomalies. GitHub logs and commit histories should be reviewed for suspicious changes during the compromise period.
Source: www.golem.de · Published June 8, 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrasing and classification via Lumi News Pipeline v1.6.5.