Microsoft (MSFT), a global tech company, said hackers have broken into its open-source GitHub projects. During the attack, Malware was injected into developer tools, including AI coding apps like VS Code, Claude Code, and Gemini CLI. The intruders targeted passwords and other sensitive dev data. In response, Microsoft removed repositories to investigate the breach, later restoring some while leaving others offline.
Microsoft Pulls GitHub Projects After Malware Discovery
Security researchers first flagged the attack after finding suspicious code in Microsoft-linked projects. Cloudsmith and OpenSourceMalware were among the first to raise concerns. They discovered malware hidden inside multiple open-source repositories. Microsoft later confirmed the removal of the affected projects, while GitHub disabled access during ongoing checks.
The malware was designed to steal passwords and sensitive data. It activated when affected tools were opened inside AI coding apps. Many Azure and developer tools were involved, meaning users could have interacted with compromised software during normal use.
Microsoft spokesperson Ben Hope confirmed the temporary removal of repos during the investigation. He said some projects were restored after review, while others remain under review. Microsoft also notified a small number of users who may have downloaded affected content.
Malware Attack Raises New Questions Around Open-Source Security
At least 70 Microsoft projects were disabled after the incident. GitHub displayed a message stating that access was banned for violating the terms. Microsoft has not confirmed how many users were affected, although the tools involved are widely used by AI devs.
The incident fits a broader pattern known as supply chain attacks, in which hackers target shared code used across many systems. Microsoft also faced a similar issue weeks earlier involving its Durable Task project, a system that helps devs build reliable workflows. However, researchers noted the latest Malware case could be a repeat attack or a separate breach.
Is Microsoft a Buy or Sell Now?
According to Wall Street analysts tracked on TipRanks, Microsoft is rated a Strong Buy. The stock has a 12-month projected average price target of $557, implying about 31% upside. Out of 37 analysts, 35 rate the stock a buy, 2 a Hold, and 0 a Sell. To learn more about Microsoft’s performance, ratings, and stock price targets, visit the TipRanks Stocks Comparison Center.
