Microsoft Pressed Over DOGE GitHub Code Tied to NLRB Data Removal

The company hasn't responded yet

Reading time icon 2 min. read


Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team. Read more

 Hackers abused GitHub comments to push malware using Microsoft repo URLs

Microsoft is under pressure after a top House Democrat raised concerns about possible misuse of its GitHub platform. Rep. Stephen Lynch has asked CEO Satya Nadella to provide records tied to a DOGE staffer’s GitHub account. That account allegedly hosted code designed to pull data from a sensitive NLRB case system.

The project, called “NxGenBdoorExtract,” was publicly visible before it was made private. Whistleblower Daniel Berulis says the code may have created a backdoor into the NLRB’s internal case system.

A screenshot of DOGE engineer Jordan Wick's public GitHub account
Image: Daniel Berulis via NPR

Cybersecurity experts believe the name alone suggests the tool was made for data extraction. Lynch says the staffers deleted system logs and built hidden exits to move government data without detection.

Roughly 10GB of data left the agency before a major spike in outbound traffic was logged, according to NPR’s report. The concern is that Microsoft’s GitHub may have unknowingly hosted code linked to that breach. Lynch wants all internal Microsoft documents related to that repository. So far, Microsoft has not publicly commented on the matter.

Also read:

House Democrats don’t have subpoena power but are urging watchdogs to launch full investigations. The concern is that sensitive labor records were leaked, possibly exposing workers to retaliation during union organizing.

The NLRB inspector general has already opened an inquiry. Lynch’s letter says this could be a serious breach of federal data protections. Microsoft is now being asked to help clarify whether its platform was involved in handling stolen government data.

More about the topics: Github, microsoft

User forum

0 messages