Wednesday Jun 10
GOVERNANCEMicrosoft

Microsoft Dev Tools Hacked, Passwords Stolen

10JUN
SUPPLY CHAINGITHUB TOOLSPWNED

The most-used AI coding tools just became an attack surface. Hackers injected malware into Microsoft's GitHub projects used with Claude Code and Gemini CLI. As AI coding agents spread, they become high-value targets for credential theft.

Hackers injected credential-stealing malware into three Microsoft-maintained open-source packages commonly installed alongside Claude Code and Gemini CLI. Scope unknown; Microsoft disclosed on June 8.

The attack vector: a compromised package ran a script harvesting stored API tokens, SSH keys, and browser-cached passwords on install. Rotate all credentials if you used affected versions.

This is a supply chain attack - same pattern as SolarWinds, but targeting AI developer toolchains. A single compromised dev account unlocks both frontier AI APIs and enterprise codebases.

full brief & sources

⚡ Why this matters

  • Every developer building with AI coding tools is running open-source dependencies - this attack shows that dependency chain is now a high-value target
  • A single compromised developer account unlocks both frontier AI API spend and enterprise codebase access - a uniquely valuable attack payload
  • The SolarWinds lesson: sophisticated attackers go upstream in the supply chain, not at the front door - this follows the same playbook

🔍 What happened

  • Microsoft disclosed on June 8 that three GitHub-maintained open-source packages were compromised with credential-harvesting malware
  • The packages are used in toolchains alongside Claude Code and Gemini CLI
  • The malware targeted API tokens, SSH private keys, and browser-cached passwords silently on installation

💬 Smart takes

  • Microsoft detected the breach within 48 hours and yanked affected versions; all users of affected versions should rotate all credentials immediately
  • The security community noted AI developer toolchains are uniquely valuable targets - they bridge frontier AI access and enterprise infrastructure
  • Scope of the breach is unknown - Microsoft has not confirmed how many developers installed the compromised versions

🧭 Where this goes

  1. TechCrunch, Microsoft Security Blog, Ars Technica - June 8 2026

🥄 The Spoon Take

The attack surface isn't the model - it's everything developers touch to build with it. Open-source toolchain security didn't matter much when the stakes were website code. It matters enormously when the same toolchain controls access to frontier AI and enterprise codebases. The SolarWinds lesson is being relearned, one npm package at a time.

🤔 Pushback

The breach was detected fast and scope is unknown - this may be a low-impact incident amplified by AI-news hype.

·TechCrunch - Microsoft GitHub hack·Microsoft Security Blog - Disclosure·Ars Technica - Supply chain attack analysis