TLDR Tech / InfoSec
Microsoft's open source tools were hacked to steal passwords of AI developers
Microsoft took down about 70 GitHub-hosted open source projects after malware was found in tools tied to Azure, Claude Code, Gemini's CLI, and VS Code. Attackers used the infected packages to capture passwords and credentials when developers opened the tools. The incident appears to be linked to an earlier compromise of Microsoft's Durable Task project, suggesting the same access was compromised again.
Read the full story