Microsoft's GitHub repositories across Azure, microsoft, Azure-Samples, and MicrosoftDocs organizations were disabled by GitHub staff due to violations of terms of service after being compromised in a supply-chain attack linked to the Miasma/Shai-Hulud malware campaign. The campaign involved injecting malicious workflows to steal credentials via GitHub OIDC tokens. The 'durabletask' repository was compromised in May, and malicious versions of the package were pushed to PyPI. The June 5 incident was contained within 105 seconds, and all repositories have since been restored and verified clean. The attack is part of a broader supply-chain threat targeting open-source AI coding tools and ecosystems. Microsoft has notified impacted customers and is continuing investigations.

The immediate impact was disruption of continuous integration workflows, including outages of Azure Functions deployment pipelines due to removal of affected repositories. Potential exposure to password-stealing malware existed through compromised repositories and packages, though no confirmed exploitation in the wild has been reported. The incident highlights risks in software supply chains and the potential for widespread disruption in developer ecosystems.

Microsoft has restored all affected repositories and confirmed they are clean and safe to use. Customers who may have pulled content from the affected repositories have been notified. Microsoft is continuing its investigation and will communicate directly if further customer action is required. Developers are advised to lock project dependencies, introduce delays in fetching new package updates, and test builds in isolated environments to mitigate supply-chain risks. No immediate action is required beyond following official communications from Microsoft.