TLDR Tech / InfoSec
Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories
A Miasma variant hit 73 Microsoft GitHub repos, mainly in Azure, knocking key Actions like Azure/functions-action offline and breaking CI/CD workflows worldwide. Attackers had earlier compromised Microsoft's durabletask PyPI package with a modular cloud intrusion framework that steals secrets and can deploy a wiper. The worm now abuses AI coding agents via config files, harvesting credentials when developers open tainted repos.
Read the full story