aiqbench analysis

Microsoft disabled over 70 open-source repositories after attackers injected password-stealing malware into its Azure and AI coding toolchains. This supply chain attack specifically targeted credentials used by developers of AI applications like Claude Code and VS Code, highlighting the critical risk of compromised dependencies in large-scale software ecosystems. The incident underscores the necessity for rigorous vetting of third-party code, particularly for tools that grant access to sensitive cloud infrastructure and customer data.