GitHub removed over 70 Microsoft repositories after suspected worm infections, disrupting CI/CD pipelines. The malware, dubbed Miasma, is described as shape-shifting but consistently targets cloud secrets and credentials. The takedown highlights risks of worm-based supply chain attacks spreading through developer infrastructure on major code hosting platforms.

•4m read time•From theregister.com
Post cover image
Table of contents
Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a weekGitHub says internal repos exfiltrated after poisoned VS Code extension attackMalware crew TeamPCP open-sources its Shai-Hulud worm on GitHubDisgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops
340.4K Impressions13 Comments