GitHub breach: poisoned VS Code extension stole 3,800 internal repos

VentureBeat

Attackers accessed roughly 3,800 internal GitHub repositories via a poisoned VS Code extension installed on an employee's device. The supply chain worm also hit Microsoft's Python SDK, according to GitHub's confirmation on May 20.

Supply chain

See 3 more sources

GitHub is investigating unauthorized access to their internal repositoriesvia Hacker News27 days agosplenditerDiscuss

GitHub Source Code Breach - TeamPCP Claims Access to Internal Source Code27 days agomseriDiscuss

Github: internal repositories have been accessed27 days agobenjajajaDiscuss

VentureBeat·Louis Columbus

27 days ago