On June 8, 2026, TechCrunch reported that Microsoft disabled over 70 of its open source repositories on GitHub,...

On June 8, 2026, TechCrunch reported that Microsoft disabled over 70 of its open source repositories on GitHub, including Azure-related tools like azure-functions-host, after hackers injected credential-stealing malware into them. This incident marks a significant security breach on GitHub, the leading platform for code hosting and collaboration, especially for AI and machine learning projects. The malware was designed to steal passwords from AI developers who might have cloned or downloaded the compromised repositories. As a result, Microsoft had to cut off access to these projects to prevent further spread. This event highlights vulnerabilities in the open source supply chain and raises questions about the security posture of GitHub, which is owned by Microsoft. For the AI infrastructure ecosystem, such incidents can erode developer trust and slow down adoption of open source AI tools. The immediate impact includes disrupted access to critical Azure functions and other Microsoft open source projects, potentially affecting developers and enterprises relying on these components. While GitHub has not yet released an official statement beyond the action taken, the incident underscores the ongoing risks of software supply chain attacks. The source for this information is the TechCrunch article (https://techcrunch.com/2026/06/08/microsofts-open-source-tools-were-hacked-to-steal-passwords-of-ai-developers/).