GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension

Hackers exfiltrated roughly 3,800 of GitHub Inc.’s internal code repositories after one of its employees installed a poisoned Visual Studio Code extension, the Microsoft Corp.-owned developer platform disclosed late Tuesday. The breach was detected Tuesday and traced to a malicious extension that GitHub’s security team found on the employee’s device. GitHub said the compromise has […] The post GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension appeared first on SiliconANGLE.

Source: SiliconANGLE | 2026-05-20