Microsoft's open source tools were hacked to steal passwords of AI developers
1–10 of 211 posts
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#2another day, another supply chain vulnerability
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#3Their source has the list of the 73 disabled repositories:
https://opensourcemalware.com/blog/miasma-reaches-azure
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#4Their source has the list of the 73 disabled repositories: https://opensourcemalware.com/blog/miasma-reaches-azure
AI;DR:
Azure (49)
azure-functions-agents-runtime azure-functions-connector-extension azure-functions-core-tools azure-functions-docker azure-functions-dotnet-extensions azure-functions-dotnet-worker azure-functions-durable-extension azure-functions-durable-js azure-functions-durable-powershell azure-functions-durable-python azure-functions-extension-bundles azure-functions-golang-worker azure-functions-host azure-functions-java-library azure-functions-java-worker azure-functions-kafka-extension azure-functions-language-worker-protobuf azure-functions-mcp-extension azure-functions-nodejs-e2e-tests azure-functions-nodejs-library azure-functions-nodejs-opentelemetry azure-functions-nodejs-worker azure-functions-openai-extension azure-functions-powershell-library azure-functions-powershell-opentelemetry azure-functions-powershell-worker azure-functions-python-extensions azure-functions-python-library azure-functions-python-worker azure-functions-rabbitmq-extension azure-functions-skills azure-functions-sql-extension azure-functions-templates azure-functions-tooling-feed azure-functions-vs-build-sdk azure-webjobs-sdk azure-webjobs-sdk-extensions azure-websites-security checkaccess-v2-go-sdk Connectors-NET-LSP Connectors-NET-Samples Connectors-NET-SDK Connectors-NodeJS-SDK connectors-python-sdk durabletask functions-action functions-container-action homebrew-functions sonic-gnmi.msft
microsoft (10)
DurableFunctionsMonitor durabletask-dotnet durabletask-go durabletask-java durabletask-js durabletask-mssql durabletask-netherite durabletask-protobuf Microsoft-Performance-Tools-Apple secure-azureai-agent
Azure-Samples (13)
azure-ai-content-understanding-python azure-container-apps-multi-agent-workflow azure-container-apps-sandboxes azure-functions-java-flex-consumption-azd azure-functions-nodejs-opentelemetry-samples azure-search-openai-demo-purviewdatasecurity functions-connectors-python functions-connectors-typescript llm-fine-tuning openai-chat-app-entra-auth-builtin openai-chat-app-entra-auth-local rag-postgres-openai-python tutor
MicrosoftDocs (1)
windows-driver-docs
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#5These seem related:
* https://news.ycombinator.com/item?id=48418318 (The Blight Reaches Microsoft: 73 Repos Disabled in 105 Seconds)
* https://news.ycombinator.com/item?id=48450543 (Miasma Worm Hits Microsoft Again: Azure Functions Action and 72 Other Repositories Disabled After Supply Chain Attack Targeting AI Coding Agents)
* https://news.ycombinator.com/item?id=48416155
* https://news.ycombinator.com/item?id=48416269 (Miasma Worm Targets AI Coding Agents via GitHub Repos)
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#6Note that also the homebrew-tap was affected: homebrew-functions
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#7The Age of Agentic Development.
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#8guys. what the fuck. are we even doing.
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#9And we trust these people with the root CA cert in our Secure Boot?
Re: Microsoft's open source tools were hacked to steal passwords of AI developers
#10And we trust these people with the root CA cert in our Secure Boot?
[deleted]