POPA ReconGitHub reveals an employee device was compromised
GitHub reveals an employee device was compromised This was via a poisoned VS Code extension, leading to exfiltration of internal repositories only They immediately contained the incident, isolated the endpoint, removed the malicious extension, and prioritized rotating critical secrets overnight The company continues log analysis and monitoring while planning a full investigation report, with attacker claims of around 3,800 repositories appearing consistent so far https://x.com/github/status/2056949168208552080?s=46&t=2q9OLMlaobNlHLewOXT4uA
The excerpt is quoted from a public Telegram channel, which owns its text.