GitHub Confirms Breach: Thousands of Internal Repositories Hit After Employee Installed Malicious VS Code Extension
GitHub confirms employee’s compromised device led to exfiltration of internal repositories via poisoned VSCode extension Threat actors TeamPCP are selling an archive of around 4,000 repositories on the dark web, asking for $50,000 with shared samples for proof. The group is also behind recent npm supply chain attacks, highlighting its ongoing campaign against developer ecosystems. […]










