ScamLens
Technical bleeping computer · 6/9/2026

GitHub disables Microsoft repos pushing password-stealing malware

This is a standalone intelligence detail page built for indexing and citation, with the summary, linked domains, and next verification paths in one place.

Quick Answer

Microsoft removed 73 malicious repositories from GitHub across Azure, microsoft, Azure-Samples, and MicrosoftDocs organizations. The repos distributed password-stealing malware through disrupted CI/CD pipelines, representing a supply chain compromise affecting multiple development environments.

1 linked domains surfaced
Tagged as malware
Intelligence grade actionable

bleeping computer

Source

MEDIUM

Importance

1

Linked Domains

0

Linked Addresses

AI Summary

Microsoft removed 73 malicious repositories from GitHub across Azure, microsoft, Azure-Samples, and MicrosoftDocs organizations. The repos distributed password-stealing malware through disrupted CI/CD pipelines, representing a supply chain compromise affecting multiple development environments.

Scam Labels

malware

Linked Domains