TechCrunch

AI, Security & Privacy

Microsoft Pulls Dozens of GitHub Repos After Hackers Planted Password-Stealing Malware in AI Developer Tools

June 2026: Microsoft disabled at least 70 GitHub repos after hackers injected password-stealing malware into Azure-related AI developer tools used in Claude Code, Gemini’s CLI, and VS Code. Cloudsmith and OpenSourceMalware identified the breach; Ben Hope says some repos were restored while others remain offline, and a small number of customers were notified.

Scroll to Top