GitHub Breach Exposes 3,800 Internal Repos via Poisoned VS Code Plugin

HotHardware·May 20

✦ NabkaNews BriefAuto-summarized from multiple outlets · verify with the source

A breach at GitHub has exposed internal repositories, with reports indicating that 3,800 repositories were affected. The breach is believed to have occurred through a poisoned VS Code extension, which was installed by an employee. The extent of the breach and its potential impact are still being reported, with some outlets noting that a hacker group is attempting to sell the stolen data.

Full coverage

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft's Python SDK

VentureBeat·May 20

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

The Hacker News·May 21

GitHub Confirms 3,800 Internal Repos Stolen Through Poisoned VS Code Extension

Decrypt·May 20

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension

Tom's Hardware·May 20

Fetching the latest headlines…

GitHub Breach Exposes 3,800 Internal Repos via Poisoned VS Code Plugin

Full coverage

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft's Python SDK

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

GitHub Confirms 3,800 Internal Repos Stolen Through Poisoned VS Code Extension

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension

GitHub Breached: Malicious VS Code Extension Exposes 3,800 Repos

GitHub confirms major breach linked to poisoned VS Code extension

GitHub Hit by Supply Chain Attack Through VS Code Extension

GitHub Hack Exposes 3,800 Repos and a Bigger VS Code Risk