GitHub confirmed a data breach affecting ~3,800 internal code repositories, caused by a malicious VS Code extension installed by an employee. A hacker group, TeamPCP, claimed responsibility, seeking $50,000 for the data.
GitHub announced on its official X account that a malicious extension for Visual Studio Code compromised employee devices, leading to unauthorized access to internal repositories. A hacking group named TeamPCP claimed responsibility, stating they stole approximately 4,000 repositories and offered them for sale.
GitHub confirmed a cyberattack involving unauthorized access to internal repositories after a threat actor claimed to be selling company data. The breach was linked to a poisoned VS Code extension on an employee device.
