POPA ReconGitHub Confirms Internal Repo Breach After Malicious VS Code Extension Attack
GitHub Confirms Internal Repo Breach After Malicious VS Code Extension Attack GitHub has confirmed unauthorized access to its internal repositories following a compromise of an employee device infected via a poisoned VS Code extension. The company said it immediately removed the malicious extension, isolated the endpoint, and activated incident response procedures. According to GitHub, the attacker exfiltrated data only from internal repositories, with no evidence so far of impact on customer or public repositories. Claims of access to ~3,800 repositories are described as “directionally c…
The excerpt is quoted from a public Telegram channel, which owns its text.