GitHub scrubs 70+ Microsoft repos as Miasma worm breaks CI/CD pipelines

GitHub disabled over 70 Microsoft repositories in under two minutes after detecting the Miasma worm spreading through compromised contributor commits. The attack began with a malicious commit to Azure/durabletask that dropped config files triggering remote code execution when developers opened repos in IDEs or AI coding tools. The mass takedown broke CI/CD pipelines worldwide, including Azure/functions-action, and researchers believe unrotated tokens from a prior PyPi attack allowed the worm to re-infect Microsoft's open source ecosystem.