Microsoft has taken down dozens of GitHub code repositories linked to its Azure platform and AI coding tools following a reported security breach. The action came after attackers allegedly compromised these open-source resources to steal passwords from AI developers. The company confirmed the removals were precautionary measures to prevent further exposure and protect user credentials.

The incident highlights ongoing risks in the open-source ecosystem, where widely used code repositories can become targets for credential harvesting attacks. Microsoft emphasized that no evidence suggests its internal systems were breached, but the compromise of public repos raised concerns about supply chain vulnerabilities. Developers relying on these tools were advised to rotate passwords and review recent activity.

Microsoft has not disclosed the exact number of affected repositories or the method used by attackers. However, the company stated it is working with GitHub to investigate the scope of the incident and improve security monitoring for open-source projects. No user data beyond potential credential exposure has been confirmed as compromised.

For AI developers and content creators using Microsoft’s open-source tools, the event serves as a reminder to enable multi-factor authentication, audit dependencies, and stay vigilant about third-party code sources. Microsoft reiterated its commitment to securing the developer ecosystem and pledged to share updates as the investigation progresses.

The company has not announced plans to restore the removed repositories, pending a full security review. Creators are encouraged to check official Microsoft channels for guidance on safe usage of affected tools.