It does seem kind of funny that all these FOSS security breaches seem to always come from code hosted on #MicrosoftGitHub. It's almost like being in their repositories automatically makes your code more scrutinized by some large corporation that hates FOSS.