employee device compromise

GitHub Investigates Unauthorized Access After Employee Device Compromise

GitHub is investigating unauthorized access to its internal repositories following a compromise of an employee's device via a poisoned VS Code extension. A hacking group, TeamPCP, claims responsibility and is reportedly selling the data online.