GitHub Empire on the Brink of Collapse: Source Code Leak, 18-Year Veteran Leaves, Microsoft Loses 1.5 Billion Developers

marsbitPublicado a 2026-05-22Actualizado a 2026-05-22

Resumen

GitHub is facing an unprecedented crisis, marked by a massive exodus of developers and severe operational failures. The tipping point came when Mitchell Hashimoto, creator of Ghostty and an 18-year GitHub user, publicly severed ties, citing persistent platform outages that made serious work impossible. This departure highlights a broader pattern of user frustration. The platform's instability has drawn complaints from major corporate clients like Citibank and Intel, forcing Microsoft to issue substantial service credits. A critical incident last month saw an accidentally triggered, unreleased feature cause widespread repository rollbacks, erasing recent code changes and pushing enterprises to migrate. Security has catastrophically breached. In May 2026, hackers infiltrated over 3,800 of GitHub's internal repositories via a poisoned VS Code extension installed by a developer, leading to the attempted sale of core source code for $50,000. This follows the discovery of a critical zero-day vulnerability in March that threatened access to millions of repositories. Internally, GitHub's autonomy has collapsed. After the resignation of CEO Thomas Dohmke in mid-2025, Microsoft eliminated the CEO role, folding GitHub into its CoreAI division under the unpopular leadership of Jay Parikh. This triggered a talent drain, with key executives and engineers leaving. A disruptive migration of GitHub's infrastructure to Azure servers, pushed by CTO Vladimir Fedorov, is blamed for the recurri...

GitHub is experiencing an unprecedented major collapse.

Recently, the global open-source tech community witnessed a shocking rift.

Mitchell Hashimoto, an 18-year veteran fan of GitHub and the famous developer of the Ghostty terminal, posted a sensational 'farewell letter' that went viral—every word bleeding with pain.

GitHub fails me every day.

I wish it were better, but I want to program more. I can no longer program using GitHub. I'm sorry, after 18 years, I have to go.

If a platform locks you out for hours every day, it is no longer suitable for serious work.

Subsequently, Ghostty packed up all its assets and decisively left.

His departure is just the tip of the iceberg in an avalanche.

GitHub's Life or Death

In recent months, giants like Citibank and Intel have expressed dissatisfaction to Microsoft over GitHub's ongoing failures. Even OpenAI has begun exploring self-built solutions.

To appease customers, Microsoft had to issue a large number of Credits to enterprise users as compensation for losses, leading directly to a bleeding of profits.

The most severe incident occurred last month: a mistakenly triggered, unreleased feature on GitHub caused numerous repositories to 'roll back,' with recent code modifications disappearing directly. Many enterprises have been forced to migrate.

Nearly eight years ago, when Microsoft acquired GitHub for $7.5 billion, global programmers were filled with concern.

As expected, after a brief golden period, this 'programmer's sanctuary'—hosting over 1.5 billion developers and 10 billion code repositories worldwide—now stands at a critical juncture of life or death in an extremely brutal manner.

3800+ Repositories 'Wiped Out' by Hackers

Even more serious, a recent security storm has completely stripped GitHub bare.

On May 21, 2026, a message instantly exploded on the hacker forum BreachForums: a hacker group openly offered GitHub's core source code for sale at a mere $50,000!

They arrogantly wrote:

Everything of the main platform is here. I would be happy to send samples to interested buyers for verification. This is not blackmail; we are too lazy to extort GitHub. If one person buys, we will completely destroy the data. If no buyer is found, we will soon make it public for free.

Subsequently, GitHub officially reluctantly confirmed: over 3,800 internal code repositories were indeed compromised.

The origin of this disaster is absurdly unbelievable: a GitHub internal developer installed a malicious, poisoned VS Code extension plugin on their work device. After credentials were leaked, over 3,800 repositories were breached.

VS Code and GitHub, both belonging to Microsoft, should have been a 'family ecosystem combination.' However, VS Code plugins lack high-intensity review mechanisms, making them the perfect entry point for hackers.

Because VS Code frequently prompts developers to install various plugins, these 'Trojan horses' can freely access local files, system terminals, etc.

When the GitHub engineer downloaded the malicious plugin, their long-term valid personal access token was instantly intercepted by the hackers!

For a platform built on 'code security and hosting,' having its source code publicly offered for sale is undoubtedly a resounding slap in the face.

This is just the tip of the iceberg.

In March of this year, security agencies discovered a 0-day-level critical vulnerability in GitHub's internal Git infrastructure.

If exploited, attackers could directly and unlimitedly access millions of public and private code repositories across the entire network, with consequences a hundred times more terrifying than this incident!

Management Shake-up: No More CEO, Reduced to a Microsoft Vassal

Behind the frequent security and technical incidents is GitHub's internal 'leaderless state' for nearly a year.

Last summer, the beloved former CEO Thomas Dohmke suddenly resigned. Microsoft then made a decision that shocked all employees: completely abolish the GitHub CEO position.

GitHub CEO Thomas Dohmke

Dohmke thanked everyone: 'GitHub has never been stronger, with over 1 billion repositories and branches, and over 1.5 billion developers. It is thanks to your relentless efforts that GitHub Copilot has brought the biggest transformation in software development since the advent of the PC.'

For seven years, GitHub proudly maintained its status as an 'independent subsidiary.' But last summer, it was merged into the newly formed CoreAI team.

This drastic change directly pushed GitHub executives into an awkward position: they lost their direct line of communication with Microsoft's top leadership and were forced to report to Parikh, the head of the CoreAI team and former Meta executive.

However, Parikh is extremely unpopular internally. It was he who insisted on erasing the GitHub CEO position.

'There's basically no GitHub here anymore; it's now completely a department of Microsoft,' one senior employee angrily stated. 'Management and technical talent are fleeing madly.'

This was followed by a loss of top talent: former CEO Dohmke founded the next-generation developer platform Entire, poaching 11 people; 34-year veteran Julia Liuson resigned; Senior Vice President of Product Engineering Jared Palmer transferred to the Xbox team; the Chief Revenue Officer resigned.

Current CTO Vladimir Fedorov aggressively promoted the project to migrate GitHub to Azure servers. This complex MySQL cluster relocation directly caused the chain of outages over the past year.

Thus, GitHub's R&D, finance, and marketing have been comprehensively strangled and devoured. Internally, there is division and discord, with the loss of technical backbone.

GitHub's once-proud 'pure developer culture' is being gnawed away by Microsoft's bureaucratic and powerful system!

Moat Breached: Cursor and Claude Code's Dimensional Reduction Strike

The external outages and internal turmoil have torn open huge cracks for predators.

Once, Copilot was almost synonymous with AI-assisted programming.

However, in 2024, Cursor emerged out of nowhere. While GitHub Copilot was still stuck in the 'you write a line, I guess the next line' code completion stage, Cursor could already understand the entire project context and generate entire modules with one click.

In 2025, Claude Code launched a dimensional reduction strike—it could not only write code but also automate complex debugging, testing, and multi-file collaborative modifications.

Microsoft was thrown into unprecedented panic internally. According to leaks, Jay Parikh warned with an ashen face in a meeting: GitHub is facing a 'death threat.'

Parikh's core fear is: once developers get used to completing all development in Cursor, they will no longer upload their code to GitHub.

To this end, Microsoft seriously evaluated acquiring Cursor but hesitated for a moment. In the blink of an eye, Cursor was snapped up by SpaceX.

What's even more amusing is that Claude Code is so incredibly good that tens of thousands of engineers in Microsoft's Windows and Office departments have all become die-hard fans of CC. Microsoft executives were completely broken!

Rajesh Jha issued a strict order to all staff, forcibly revoking all CC licenses by the end of June and forcing engineers to revert to using GitHub Copilot CLI.

Financial Avalanche: The 'Subsidy Black Hole' of Making More Money, Losing More Money

Moreover, GitHub's commercial operations are also deeply mired, even starting to backfire on Microsoft.

On the surface, GitHub's data still looks impressive. By the end of 2025, Copilot paid users surpassed 4.7 million, and GitHub's annual recurring revenue crossed the $3 billion threshold.

But behind the pretty numbers, it's all Microsoft's blood.

With the AI explosion, GitHub traffic surged 14 times. However, AI features for code hosting and open-source projects remain completely free.

Meanwhile, the inference costs for running AI models remain high. The computing power consumed by heavy users far exceeds the $10 monthly subscription fee—the more they sell, the more they lose.

During Microsoft's earnings call in April this year, the CFO rarely admitted: the significant increase in GitHub Copilot usage directly lowered the gross margin of the entire core cloud business.

Under pressure from Wall Street, GitHub announced last month: abolish the unlimited monthly usage model and fully transition to 'pay-as-you-go.' Once credits are depleted, AI services are immediately cut off.

This move, perceived as greedy, completely infuriated developers!

The global IT services giant NinjaOne immediately publicly stated: they are comprehensively guiding engineers to abandon GitHub and turn to the Claude Code ecosystem.

Will GitHub Die?

This year, Microsoft's stock price has fallen by over 10%, performing the worst among the 'Magnificent Seven' tech stocks.

Its developer ecosystem cornerstone, GitHub, is pushing everything toward the abyss.

To break free from dependence on OpenAI and Anthropic, CoreAI has ordered the comprehensive collection of all code to train Microsoft's own native large model.

This practice of recklessly depleting the ecosystem for its own benefit has completely chilled developers worldwide.

The trust of the open-source community, the neutral ecological environment, and the free, pure developer culture are rapidly vanishing from this $7.5 billion behemoth.

Now, the most fatal question facing Satya Nadella is: In the era of AI agents, do global developers still need a central code repository platform like GitHub?

If Microsoft cannot provide a convincing answer, it will lose the soul it has cultivated around its ecosystem for decades—

'Developers, developers, developers!'

References:

https://www.theverge.com/tech/935250/microsoft-github-struggles-notepadhttps://mitchellh.com/writing/ghostty-leaving-githubhttps://www.wired.com/story/teampcp-software-supply-chain-attack-spree-github/?utm_source=chatgpt.com

This article comes from the WeChat public account "Xinzhiyuan," author: ASI Revelation.

Preguntas relacionadas

QWho is Mitchell Hashimoto and what significant action did he take regarding GitHub?

AMitchell Hashimoto is the developer of the Ghostty terminal and a long-time GitHub user. He recently announced his departure from the platform, citing frequent outages that prevented serious work, and moved the Ghostty project assets away from GitHub.

QWhat major security incident involving GitHub's source code is detailed in the article?

AA hacker group breached and stole the source code for over 3,800 of GitHub's internal repositories. The breach originated from a GitHub engineer installing a malicious VS Code extension, which compromised their credentials, allowing the hackers to access and later attempt to sell the code.

QHow has Microsoft's internal restructuring impacted GitHub's leadership?

AMicrosoft disbanded GitHub's independent subsidiary status and merged it into the CoreAI team. The CEO position was eliminated, and GitHub's leadership now reports to the CoreAI head, Jay Parikh, leading to a loss of autonomy, internal dissatisfaction, and a significant exodus of senior talent.

QWhat competitive threats to GitHub Copilot are mentioned, and what was Microsoft's internal reaction?

AThe article cites Cursor and Claude Code as major competitive threats, offering more advanced AI-assisted programming features. Microsoft was internally alarmed, with executives describing it as an 'existential threat.' Notably, many Microsoft engineers preferred using Claude Code, prompting management to forcibly revoke its licenses within the company.

QWhat financial and operational challenges is GitHub facing according to the article?

AGitHub is struggling with profitability despite high revenue. The massive computational costs of running free AI features like Copilot exceed subscription income, negatively impacting Microsoft's cloud margins. In response, GitHub shifted from a flat-rate subscription to a pay-as-you-go model, which angered many developers and prompted some companies to consider alternatives.

Lecturas Relacionadas

Ripple’s RLUSD Lands In Mastercard’s Stablecoin Settlement Expansion

Mastercard is expanding its stablecoin settlement capabilities, adding Ripple's RLUSD alongside other regulated stablecoins like USDC and PYUSD. This move allows issuers and acquirers to settle card transactions using digital assets on various blockchains, including Ethereum, Solana, and the XRP Ledger. The enhancement introduces intraday, weekend, and holiday settlement options, aiming to provide more flexibility, especially for cross-border payments and treasury operations. Mastercard positions this as a network-level addition that complements existing processes, with initial support focused on the US and Latin America. Ripple views RLUSD's inclusion as validation for regulated stablecoins in institutional payment infrastructure, highlighting the growing demand for faster, always-on settlement.

bitcoinistHace 51 min(s)

Ripple’s RLUSD Lands In Mastercard’s Stablecoin Settlement Expansion

bitcoinistHace 51 min(s)

Fei-Fei Li's Team Clarifies the Concept of 'World Models', Sora Merely a Renderer

"World Models" has become a widely used yet confusing term in AI. To address this, a team led by Fei-Fei Li and World Labs proposed a functional taxonomy based on the Partially Observable Markov Decision Process framework. This taxonomy categorizes systems called "world models" into three distinct projections: Renderers, Simulators, and Planners. Renderers, like OpenAI's Sora and other video generation models, focus on producing photorealistic visual outputs for human perception. They prioritize visual fidelity over physical accuracy. Simulators, such as NVIDIA Omniverse, aim to compute precise future environmental states for computational tasks like engineering analysis or digital twins. Planners, like Vision-Language-Action models, take in observations and goals to output executable actions for robots or agents. The article clarifies that most current "world models," including Sora, are primarily Renderers. They generate convincing visuals but lack the core ability to simulate state transitions based on actions, a key requirement for a true world model in classic reinforcement learning definitions. This conceptual confusion has practical implications, leading to potential misalignment in technology selection, investment, and public understanding of AI capabilities. Clear categorization is crucial. It helps enterprises avoid costly mistakes (e.g., using a renderer for robot training), allows investors to accurately assess markets, and enables researchers to build comparable benchmarks. While future systems may integrate these functions, recognizing current boundaries is essential for honest assessment and progress.

marsbitHace 1 hora(s)

Fei-Fei Li's Team Clarifies the Concept of 'World Models', Sora Merely a Renderer

marsbitHace 1 hora(s)

From Web3 to AI Agent: Veteran Crypto VC Variant Bets $300 Million on Pivot

Variant Fund has announced the launch of Variant 4, a new $222 million early-stage venture fund. Its investment thesis has evolved from "digital ownership" to a broader theme of "sovereignty," focusing on technologies that enhance user agency—the control individuals have over their lives, assets, and identity. The firm distinguishes between mere automation and systems that genuinely empower users, emphasizing that the key question is who ultimately benefits: the user or the platform. This new framework encompasses Variant's existing investments in areas like public blockchains (Ethereum, Solana), developer infrastructure, decentralized finance (e.g., Uniswap), and consumer applications. It also informs recent early bets on projects such as Honcho (for self-custodial AI agent memory), Octet (cryptographic verification of physical location), and here.now (an "agent cloud" for owning and composing generative content). Variant's core mission remains to back founders building technologies that expand user sovereignty, moving towards an internet where users possess unprecedented agency rather than being the product.

marsbitHace 1 hora(s)

From Web3 to AI Agent: Veteran Crypto VC Variant Bets $300 Million on Pivot

marsbitHace 1 hora(s)

Solana Explosive Growth Pushes Its Monthly Perps Volume Beyond Prior Records

Despite bearish market conditions and price volatility, Solana is demonstrating significant strength in its derivatives market. The network's monthly perpetual futures volume has surged to a new record, exceeding $76.7 billion in May 2026—a 34% increase from the previous high. This growth reflects heightened speculative activity and trader engagement. Analysts note that perpetual contracts are becoming crucial financial primitives, with Solana positioning itself as a network for genuine on-chain price discovery and execution. Concurrently, Solana is experiencing a massive increase in stablecoin activity, processing over $79.9 billion in stablecoin volume in one week, underscoring its role as a major hub for on-chain liquidity and transactions.

bitcoinistHace 1 hora(s)

Solana Explosive Growth Pushes Its Monthly Perps Volume Beyond Prior Records

bitcoinistHace 1 hora(s)

Bloomberg Uncovered: How Do China's Wealthy Circumvent the Annual $50,000 Limit to Transfer Assets?

**Summary: How Wealthy Chinese Circumvent $50,000 Annual Foreign Exchange Limits** Despite China's strict capital controls, including an annual $50,000 per person foreign exchange quota, an estimated $150 billion in funds still leaves the country annually via various gray and underground channels. This report outlines the evolution of China's "capital wall" and the methods used to bypass it. **The Evolving Capital Controls:** * **Foundation (1994):** The system of "current account convertibility with strict capital account controls" was established. * **Quota Set (2007):** The $50,000 individual annual forex purchase limit was formalized. * **Crackdown Begins (2015-2017):** Following market volatility, enforcement tightened. Banks were required to scrutinize transactions, and channels like using UnionPay cards for Hong Kong insurance premiums or buying overseas property were blocked. * **Digital & Legal Upgrades (2024-2026):** Enhanced algorithms now flag suspicious patterns (e.g., "smurfing"). The Common Reporting Standard (CRS) provides Chinese tax authorities with data on citizens' offshore accounts. Unlicensed cross-border brokers have been targeted. **Five Primary Methods for Moving Capital:** 1. **Underground Banking / "Hawala" (Duiqiao):** The largest-scale method. No money crosses borders. Clients pay RMB to a domestic account; an overseas associate deposits equivalent foreign currency into the client's offshore account. Risks include high fees, account freezes, and legal penalties. 2. **"Smurfing" or "Ant Moving":** Using multiple individuals' $50,000 quotas to pool funds for one offshore recipient. Increasingly detected by anti-money laundering algorithms. 3. **Trade Invoice Manipulation:** Businesses over-invoice imports or under-invoice exports via offshore shell companies, creating a pretext to transfer excess funds abroad under the guise of trade. 4. **Channel Migration:** After a crackdown on internet brokers, funds flow toward more compliant but costly channels like major banks' cross-border wealth management services or Qualified Domestic Institutional Investor (QDII) quotas. 5. **Structural Arrangements:** High-net-worth individuals use complex, high-cost legal structures involving offshore trusts, insurance, and investment migration programs to transfer asset ownership. **Regulatory Response: Focusing on People, Not Just Money** The current strategy extends oversight from enterprises to **individual residents**. Tools like CRS allow retroactive visibility into offshore assets. Cryptocurrencies, once seen as a potential loophole, are now actively monitored and prosecuted as an illegal channel. The underlying driver remains: with significant wealth concentrated among millions of affluent households seeking diversification amid domestic economic shifts, the incentive to move assets offshore persists despite regulatory barriers.

marsbitHace 1 hora(s)

Bloomberg Uncovered: How Do China's Wealthy Circumvent the Annual $50,000 Limit to Transfer Assets?

marsbitHace 1 hora(s)

Trading

Spot

Futuros

Artículos destacados

Cómo comprar OP

¡Bienvenido a HTX.com! Hemos hecho que comprar Optimism (OP) sea simple y conveniente. Sigue nuestra guía paso a paso para iniciar tu viaje de criptos.Paso 1: crea tu cuenta HTXUtiliza tu correo electrónico o número de teléfono para registrarte y obtener una cuenta gratuita en HTX. Experimenta un proceso de registro sin complicaciones y desbloquea todas las funciones.Obtener mi cuentaPaso 2: ve a Comprar cripto y elige tu método de pagoTarjeta de crédito/débito: usa tu Visa o Mastercard para comprar Optimism (OP) al instante.Saldo: utiliza fondos del saldo de tu cuenta HTX para tradear sin problemas.Terceros: hemos agregado métodos de pago populares como Google Pay y Apple Pay para mejorar la comodidad.P2P: tradear directamente con otros usuarios en HTX.Over-the-Counter (OTC): ofrecemos servicios personalizados y tipos de cambio competitivos para los traders.Paso 3: guarda tu Optimism (OP)Después de comprar tu Optimism (OP), guárdalo en tu cuenta HTX. Alternativamente, puedes enviarlo a otro lugar mediante transferencia blockchain o utilizarlo para tradear otras criptomonedas.Paso 4: tradear Optimism (OP)Tradear fácilmente con Optimism (OP) en HTX's mercado spot. Simplemente accede a tu cuenta, selecciona tu par de trading, ejecuta tus trades y monitorea en tiempo real. Ofrecemos una experiencia fácil de usar tanto para principiantes como para traders experimentados.

399 Vistas totalesPublicado en 2024.12.12Actualizado en 2026.06.02

Discusiones

Bienvenido a la comunidad de HTX. Aquí puedes mantenerte informado sobre los últimos desarrollos de la plataforma y acceder a análisis profesionales del mercado. A continuación se presentan las opiniones de los usuarios sobre el precio de OP (OP).