GitHub Empire on the Brink of Collapse: Source Code Leak, 18-Year Veteran Leaves, Microsoft Loses 1.5 Billion Developers

marsbit2026-05-22 tarihinde yayınlandı2026-05-22 tarihinde güncellendi

Özet

GitHub is facing an unprecedented crisis, marked by a massive exodus of developers and severe operational failures. The tipping point came when Mitchell Hashimoto, creator of Ghostty and an 18-year GitHub user, publicly severed ties, citing persistent platform outages that made serious work impossible. This departure highlights a broader pattern of user frustration. The platform's instability has drawn complaints from major corporate clients like Citibank and Intel, forcing Microsoft to issue substantial service credits. A critical incident last month saw an accidentally triggered, unreleased feature cause widespread repository rollbacks, erasing recent code changes and pushing enterprises to migrate. Security has catastrophically breached. In May 2026, hackers infiltrated over 3,800 of GitHub's internal repositories via a poisoned VS Code extension installed by a developer, leading to the attempted sale of core source code for $50,000. This follows the discovery of a critical zero-day vulnerability in March that threatened access to millions of repositories. Internally, GitHub's autonomy has collapsed. After the resignation of CEO Thomas Dohmke in mid-2025, Microsoft eliminated the CEO role, folding GitHub into its CoreAI division under the unpopular leadership of Jay Parikh. This triggered a talent drain, with key executives and engineers leaving. A disruptive migration of GitHub's infrastructure to Azure servers, pushed by CTO Vladimir Fedorov, is blamed for the recurri...

GitHub is experiencing an unprecedented major collapse.

Recently, the global open-source tech community witnessed a shocking rift.

Mitchell Hashimoto, an 18-year veteran fan of GitHub and the famous developer of the Ghostty terminal, posted a sensational 'farewell letter' that went viral—every word bleeding with pain.

GitHub fails me every day.

I wish it were better, but I want to program more. I can no longer program using GitHub. I'm sorry, after 18 years, I have to go.

If a platform locks you out for hours every day, it is no longer suitable for serious work.

Subsequently, Ghostty packed up all its assets and decisively left.

His departure is just the tip of the iceberg in an avalanche.

GitHub's Life or Death

In recent months, giants like Citibank and Intel have expressed dissatisfaction to Microsoft over GitHub's ongoing failures. Even OpenAI has begun exploring self-built solutions.

To appease customers, Microsoft had to issue a large number of Credits to enterprise users as compensation for losses, leading directly to a bleeding of profits.

The most severe incident occurred last month: a mistakenly triggered, unreleased feature on GitHub caused numerous repositories to 'roll back,' with recent code modifications disappearing directly. Many enterprises have been forced to migrate.

Nearly eight years ago, when Microsoft acquired GitHub for $7.5 billion, global programmers were filled with concern.

As expected, after a brief golden period, this 'programmer's sanctuary'—hosting over 1.5 billion developers and 10 billion code repositories worldwide—now stands at a critical juncture of life or death in an extremely brutal manner.

3800+ Repositories 'Wiped Out' by Hackers

Even more serious, a recent security storm has completely stripped GitHub bare.

On May 21, 2026, a message instantly exploded on the hacker forum BreachForums: a hacker group openly offered GitHub's core source code for sale at a mere $50,000!

They arrogantly wrote:

Everything of the main platform is here. I would be happy to send samples to interested buyers for verification. This is not blackmail; we are too lazy to extort GitHub. If one person buys, we will completely destroy the data. If no buyer is found, we will soon make it public for free.

Subsequently, GitHub officially reluctantly confirmed: over 3,800 internal code repositories were indeed compromised.

The origin of this disaster is absurdly unbelievable: a GitHub internal developer installed a malicious, poisoned VS Code extension plugin on their work device. After credentials were leaked, over 3,800 repositories were breached.

VS Code and GitHub, both belonging to Microsoft, should have been a 'family ecosystem combination.' However, VS Code plugins lack high-intensity review mechanisms, making them the perfect entry point for hackers.

Because VS Code frequently prompts developers to install various plugins, these 'Trojan horses' can freely access local files, system terminals, etc.

When the GitHub engineer downloaded the malicious plugin, their long-term valid personal access token was instantly intercepted by the hackers!

For a platform built on 'code security and hosting,' having its source code publicly offered for sale is undoubtedly a resounding slap in the face.

This is just the tip of the iceberg.

In March of this year, security agencies discovered a 0-day-level critical vulnerability in GitHub's internal Git infrastructure.

If exploited, attackers could directly and unlimitedly access millions of public and private code repositories across the entire network, with consequences a hundred times more terrifying than this incident!

Management Shake-up: No More CEO, Reduced to a Microsoft Vassal

Behind the frequent security and technical incidents is GitHub's internal 'leaderless state' for nearly a year.

Last summer, the beloved former CEO Thomas Dohmke suddenly resigned. Microsoft then made a decision that shocked all employees: completely abolish the GitHub CEO position.

GitHub CEO Thomas Dohmke

Dohmke thanked everyone: 'GitHub has never been stronger, with over 1 billion repositories and branches, and over 1.5 billion developers. It is thanks to your relentless efforts that GitHub Copilot has brought the biggest transformation in software development since the advent of the PC.'

For seven years, GitHub proudly maintained its status as an 'independent subsidiary.' But last summer, it was merged into the newly formed CoreAI team.

This drastic change directly pushed GitHub executives into an awkward position: they lost their direct line of communication with Microsoft's top leadership and were forced to report to Parikh, the head of the CoreAI team and former Meta executive.

However, Parikh is extremely unpopular internally. It was he who insisted on erasing the GitHub CEO position.

'There's basically no GitHub here anymore; it's now completely a department of Microsoft,' one senior employee angrily stated. 'Management and technical talent are fleeing madly.'

This was followed by a loss of top talent: former CEO Dohmke founded the next-generation developer platform Entire, poaching 11 people; 34-year veteran Julia Liuson resigned; Senior Vice President of Product Engineering Jared Palmer transferred to the Xbox team; the Chief Revenue Officer resigned.

Current CTO Vladimir Fedorov aggressively promoted the project to migrate GitHub to Azure servers. This complex MySQL cluster relocation directly caused the chain of outages over the past year.

Thus, GitHub's R&D, finance, and marketing have been comprehensively strangled and devoured. Internally, there is division and discord, with the loss of technical backbone.

GitHub's once-proud 'pure developer culture' is being gnawed away by Microsoft's bureaucratic and powerful system!

Moat Breached: Cursor and Claude Code's Dimensional Reduction Strike

The external outages and internal turmoil have torn open huge cracks for predators.

Once, Copilot was almost synonymous with AI-assisted programming.

However, in 2024, Cursor emerged out of nowhere. While GitHub Copilot was still stuck in the 'you write a line, I guess the next line' code completion stage, Cursor could already understand the entire project context and generate entire modules with one click.

In 2025, Claude Code launched a dimensional reduction strike—it could not only write code but also automate complex debugging, testing, and multi-file collaborative modifications.

Microsoft was thrown into unprecedented panic internally. According to leaks, Jay Parikh warned with an ashen face in a meeting: GitHub is facing a 'death threat.'

Parikh's core fear is: once developers get used to completing all development in Cursor, they will no longer upload their code to GitHub.

To this end, Microsoft seriously evaluated acquiring Cursor but hesitated for a moment. In the blink of an eye, Cursor was snapped up by SpaceX.

What's even more amusing is that Claude Code is so incredibly good that tens of thousands of engineers in Microsoft's Windows and Office departments have all become die-hard fans of CC. Microsoft executives were completely broken!

Rajesh Jha issued a strict order to all staff, forcibly revoking all CC licenses by the end of June and forcing engineers to revert to using GitHub Copilot CLI.

Financial Avalanche: The 'Subsidy Black Hole' of Making More Money, Losing More Money

Moreover, GitHub's commercial operations are also deeply mired, even starting to backfire on Microsoft.

On the surface, GitHub's data still looks impressive. By the end of 2025, Copilot paid users surpassed 4.7 million, and GitHub's annual recurring revenue crossed the $3 billion threshold.

But behind the pretty numbers, it's all Microsoft's blood.

With the AI explosion, GitHub traffic surged 14 times. However, AI features for code hosting and open-source projects remain completely free.

Meanwhile, the inference costs for running AI models remain high. The computing power consumed by heavy users far exceeds the $10 monthly subscription fee—the more they sell, the more they lose.

During Microsoft's earnings call in April this year, the CFO rarely admitted: the significant increase in GitHub Copilot usage directly lowered the gross margin of the entire core cloud business.

Under pressure from Wall Street, GitHub announced last month: abolish the unlimited monthly usage model and fully transition to 'pay-as-you-go.' Once credits are depleted, AI services are immediately cut off.

This move, perceived as greedy, completely infuriated developers!

The global IT services giant NinjaOne immediately publicly stated: they are comprehensively guiding engineers to abandon GitHub and turn to the Claude Code ecosystem.

Will GitHub Die?

This year, Microsoft's stock price has fallen by over 10%, performing the worst among the 'Magnificent Seven' tech stocks.

Its developer ecosystem cornerstone, GitHub, is pushing everything toward the abyss.

To break free from dependence on OpenAI and Anthropic, CoreAI has ordered the comprehensive collection of all code to train Microsoft's own native large model.

This practice of recklessly depleting the ecosystem for its own benefit has completely chilled developers worldwide.

The trust of the open-source community, the neutral ecological environment, and the free, pure developer culture are rapidly vanishing from this $7.5 billion behemoth.

Now, the most fatal question facing Satya Nadella is: In the era of AI agents, do global developers still need a central code repository platform like GitHub?

If Microsoft cannot provide a convincing answer, it will lose the soul it has cultivated around its ecosystem for decades—

'Developers, developers, developers!'

References:

https://www.theverge.com/tech/935250/microsoft-github-struggles-notepadhttps://mitchellh.com/writing/ghostty-leaving-githubhttps://www.wired.com/story/teampcp-software-supply-chain-attack-spree-github/?utm_source=chatgpt.com

This article comes from the WeChat public account "Xinzhiyuan," author: ASI Revelation.

İlgili Sorular

QWho is Mitchell Hashimoto and what significant action did he take regarding GitHub?

AMitchell Hashimoto is the developer of the Ghostty terminal and a long-time GitHub user. He recently announced his departure from the platform, citing frequent outages that prevented serious work, and moved the Ghostty project assets away from GitHub.

QWhat major security incident involving GitHub's source code is detailed in the article?

AA hacker group breached and stole the source code for over 3,800 of GitHub's internal repositories. The breach originated from a GitHub engineer installing a malicious VS Code extension, which compromised their credentials, allowing the hackers to access and later attempt to sell the code.

QHow has Microsoft's internal restructuring impacted GitHub's leadership?

AMicrosoft disbanded GitHub's independent subsidiary status and merged it into the CoreAI team. The CEO position was eliminated, and GitHub's leadership now reports to the CoreAI head, Jay Parikh, leading to a loss of autonomy, internal dissatisfaction, and a significant exodus of senior talent.

QWhat competitive threats to GitHub Copilot are mentioned, and what was Microsoft's internal reaction?

AThe article cites Cursor and Claude Code as major competitive threats, offering more advanced AI-assisted programming features. Microsoft was internally alarmed, with executives describing it as an 'existential threat.' Notably, many Microsoft engineers preferred using Claude Code, prompting management to forcibly revoke its licenses within the company.

QWhat financial and operational challenges is GitHub facing according to the article?

AGitHub is struggling with profitability despite high revenue. The massive computational costs of running free AI features like Copilot exceed subscription income, negatively impacting Microsoft's cloud margins. In response, GitHub shifted from a flat-rate subscription to a pay-as-you-go model, which angered many developers and prompted some companies to consider alternatives.

İlgili Okumalar

Ten-Thousand-Word Analysis: From $10 to $290, MRVL Wins the Entire AI Era by 'Not Making GPUs'

Marvell Technology's stock price surged from under $10 in 2016 to a record $290 in June 2026, fueled not by making GPUs, but by dominating AI infrastructure connectivity. This analysis argues the market misvalues MRVL as merely a smaller Broadcom in custom AI chips, overlooking its true, unique position. Marvell's core strength lies in enabling high-speed data flow for AI clusters through three interconnected businesses. First, it holds a commanding ~70% market share in high-speed optical DSPs (essential for data center light modules), a deep-moat business with accelerating growth. Second, its custom AI chip design business serves hyperscalers like AWS, Microsoft, and Google, with a significant revenue pipeline despite lower margins. Third, stable cash flows come from Ethernet switch chips and enterprise storage controllers. Together, they form a full-stack "AI data movement" platform. CEO Matt Murphy's transformative leadership since 2016, involving strategic divestments, key acquisitions (like Inphi for optical DSPs), and securing long-term agreements with major cloud providers, repositioned the company. A pivotal $2 billion strategic investment from NVIDIA in 2026 underscored Marvell's critical role in the AI ecosystem, particularly through collaborations like NVLink Fusion. While Marvell faces risks—including client concentration (losing the Amazon Trainium3 design), lower-margin business mix, competitive threats, insider selling, and complex supply chains—its fundamentals remain strong. The optical interconnect moat is widening with the acquisition of Celestial AI (photonics fabric), and financial metrics show accelerating revenue growth and operating leverage. With a PEG ratio suggesting undervaluation relative to its growth, the thesis is that the market undervalues Marvell's monopolistic position in AI "plumbing" while overemphasizing its competitive custom chip segment. The story transcends investing, symbolizing how in any complex system—from the internet to AI—the value of "connection" ultimately surpasses that of individual "nodes."

marsbit14 dk önce

Ten-Thousand-Word Analysis: From $10 to $290, MRVL Wins the Entire AI Era by 'Not Making GPUs'

marsbit14 dk önce

AI Relay Stations Spark Heated Debate on Zhihu: Behind Cheap Tokens, What Are Users Really Worried About?

A discussion on Zhihu about "AI relay stations" shifted the niche developer topic of "cheap tokens" into broader user awareness. Users moved beyond simply questioning the legitimacy of these services to focus on practical concerns: Where do cheap tokens truly come from? Is the model being accessed the real one? Can relay stations see prompts, code, and API keys? For occasional users, are the risks worth it? The core debate centered less on price and more on trust. A primary worry is model authenticity—the risk of "model swapping," where users paying for a premium model might be routed to a cheaper one, creating an information asymmetry. Others argued that cost comparisons matter; while cheaper than official pay-as-you-go APIs, relay stations may not be the lowest-cost option versus subscriptions, domestic models, or free tiers, making user needs assessment crucial. Speculation about token sources ranged from legitimate bulk discounts to gray-area methods like account sharing or exploiting regional pricing. This opacity makes risk assessment difficult for users. Data security emerged as a critical concern, especially for enterprise use. When processing sensitive information like code, contracts, or client data, the inability to verify a relay station's data handling, retention, or access policies poses significant compliance and confidentiality risks. The evolving consensus suggests relay stations can be used cautiously for low-sensitivity, disposable tasks (e.g., summarizing public info, simple translation). However, they should not be the default for sensitive, professional, or production workflows involving proprietary data, Agents, or automated systems. Recommendations include avoiding large prepayments, not relying on a single service, using test prompts to monitor quality, anonymizing data where possible, and keeping official channels as backups. Ultimately, the discussion framed tokens not just as a billing unit but as a measure of real cost encompassing price, model integrity, data security, and service stability. The popularity of relay stations highlights user demand for affordable access, but the debate underscores a key trade-off: the savings from cheap tokens may come at the price of trust, transparency, and control over one's data and AI experience.

marsbit44 dk önce

AI Relay Stations Spark Heated Debate on Zhihu: Behind Cheap Tokens, What Are Users Really Worried About?

marsbit44 dk önce

In-Depth Research Report on TradFi: The Convergence Wave of Crypto and Traditional Finance

In 2026, the crypto industry is undergoing a profound infrastructure-level transformation—TradFi assets are migrating on-chain at an unprecedented pace. According to CoinGecko's Q1 2026 report, the total value locked (TVL) of tokenized real-world assets (RWA) has surpassed $31 billion, a nearly 4x increase from $7.8 billion at the beginning of 2025, with the sector’s aggregate market capitalization reaching $19.3 billion. Among these, the market cap of tokenized stocks surged from $2 million to $486 million, with Q1 spot trading volume reaching $15.1 billion—a single quarter already surpassing the entire second half of 2025. RWA perpetual contract Q1 trading volume reached a staggering $524.8 billion, far exceeding the $313 billion for all of 2025. Meanwhile, BlackRock's BUIDL fund has reached $2.3 billion in scale and has filed for two new tokenized funds, signaling that the world's largest asset manager's tokenization strategy is evolving from pilot to product suite expansion. HTX, as a core participant in the crypto exchange sector, officially launched TradFi perpetual futures products including NVDA, AAPL, MSFT, META, and SPY in 2026, enabling crypto users to gain 24/7 trading access to core U.S. equities. Boston Consulting Group predicts that global tokenized asset scale could reach $16 trillion by 2030, while McKinsey offers a conservative estimate of approximately $2 trillion. The on-chain migration of TradFi assets is no longer a "future narrative" but a structural transformation unfolding in real time, as crypto exchanges evolve from single crypto asset trading platforms toward "multi-asset-class trading infrastructure."

HTX Learn46 dk önce

In-Depth Research Report on TradFi: The Convergence Wave of Crypto and Traditional Finance

HTX Learn46 dk önce

İşlemler

Spot
Futures

Popüler Makaleler

OP Nasıl Satın Alınır

HTX.com’a hoş geldiniz! Optimism (OP) satın alma işlemlerini basit ve kullanışlı bir hâle getirdik. Adım adım açıkladığımız rehberimizi takip ederek kripto yolculuğunuza başlayın. 1. Adım: HTX Hesabınızı OluşturunHTX'te ücretsiz bir hesap açmak için e-posta adresinizi veya telefon numaranızı kullanın. Sorunsuzca kaydolun ve tüm özelliklerin kilidini açın. Hesabımı Aç2. Adım: Kripto Satın Al Bölümüne Gidin ve Ödeme Yönteminizi SeçinKredi/Banka Kartı: Visa veya Mastercard'ınızı kullanarak anında Optimism (OP) satın alın.Bakiye: Sorunsuz bir şekilde işlem yapmak için HTX hesap bakiyenizdeki fonları kullanın.Üçüncü Taraflar: Kullanımı kolaylaştırmak için Google Pay ve Apple Pay gibi popüler ödeme yöntemlerini ekledik.P2P: HTX'teki diğer kullanıcılarla doğrudan işlem yapın.Borsa Dışı (OTC): Yatırımcılar için kişiye özel hizmetler ve rekabetçi döviz kurları sunuyoruz.3. Adım: Optimism (OP) Varlıklarınızı SaklayınOptimism (OP) satın aldıktan sonra HTX hesabınızda saklayın. Alternatif olarak, blok zinciri transferi yoluyla başka bir yere gönderebilir veya diğer kripto para birimlerini takas etmek için kullanabilirsiniz.4. Adım: Optimism (OP) Varlıklarınızla İşlem YapınHTX'in spot piyasasında Optimism (OP) ile kolayca işlemler yapın.Hesabınıza erişin, işlem çiftinizi seçin, işlemlerinizi gerçekleştirin ve gerçek zamanlı olarak izleyin. Hem yeni başlayanlar hem de deneyimli yatırımcılar için kullanıcı dostu bir deneyim sunuyoruz.

343 Toplam GörüntülenmeYayınlanma 2024.12.12Güncellenme 2026.06.02

OP Nasıl Satın Alınır

Tartışmalar

HTX Topluluğuna hoş geldiniz. Burada, en son platform gelişmeleri hakkında bilgi sahibi olabilir ve profesyonel piyasa görüşlerine erişebilirsiniz. Kullanıcıların OP (OP) fiyatı hakkındaki görüşleri aşağıda sunulmaktadır.

活动图片