GitHub Shuts Down 73 Microsoft Repositories After Malicious Azure Repository Commit

GitHub disabled 73 repositories across four Microsoft organizations after attackers used a compromised contributor account to push a malicious commit to Azure’s durabletask repository. Researchers linked the incident to the broader Miasma supply-chain campaign, which previously hit Red Hat’s npm ecosystem. The payload targeted developers through AI coding tools to harvest credentials, highlighting growing risks in developer workflows. Recommended responses include token rotation and pinning GitHub Actions to commit SHAs.