Miasma worm hit 73 Microsoft repositories on GitHub — a new phase of supply‑chain attack

Colleagues, please note: in cybersecurity news the Miasma worm has compromised 73 Microsoft GitHub repositories (OpenSourceMalware).

- GitHub disabled access to affected repositories.
- The durabletask package was re‑compromised; attackers pushed malicious code embedding a 4.3 MB payload, triggered via AI tools and developer utilities.
- The attack exploits trust: compromised keys and maintainers make malicious releases indistinguishable from legitimate ones.

Why it matters: increases risk to downstream projects and undermines software supply trust.

What measures do you consider a priority to protect developers?

#cybersecurity #supplychain #GitHub #DevSecOps