Microsoft's Open-Source Tools Hijacked to Steal Passwords of AI Developers

TechCrunch·high signal

TechCrunch reported on June 8 that attackers compromised Microsoft open-source developer tooling to harvest credentials specifically from AI developers, a supply-chain-style attack targeting the people building AI systems. The story surged to 319 points on Hacker News, reflecting how seriously the developer community is treating credential theft aimed at the AI build chain. It underscores that AI security risk increasingly sits in the toolchain and dependencies, not just the models.