Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

The Miasma worm compromised 73 Microsoft repositories across four organizations in a supply chain attack.

• •Attack impacted Durable Task ecosystem implementations with evidence of reused credentials from May's TeamPCP incident
• •A 4.3 MB payload runner planted in repositories to execute through Claude Code, Gemini CLI, Cursor, and VS Code
• •The worm exploits registry trust by using valid keys and authenticated accounts to distribute malicious code indistinguishably from legitimate updates

This summary was automatically generated by AI based on the original article and may not be fully accurate.