GitHub confirms breach, 3,800 internal repos exfiltrated via malicious VS Code extension

info on the github breach appears to only be available on xitter 🙄 , I fished it out for you. #github

🚨Data Breach Alert Update ‼️ GitHub Confirms Internal Repository Breach via Malicious VS Code Extension GitHub confirmed unauthorized access to internal repositories after an employee device was compromised through a malicious VS Code extension.

‼️🚨 BREAKING: GitHub has been compromised by TeamPCP. GitHub has confirmed the internal breach. A poisoned VS Code extension on an employee device exfiltrated ~3,800 internal repositories. TeamPCP is already selling the data on a cybercrime forum.

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.

Thanks VS Code extensions! Lmao I'm changing code editors. “GitHub confirms breach of 3,800 repos via malicious VSCode extension” cosocial.ca/@hub/1166075...

Sigh. “Anthropic’s new model automatically finds flaws in software that runs with restricted permissions behind a firewall. Doom!” vs “VSCode extensions are neither moderated nor sandboxed, and execute arbitrary code locally on 50 million installs. Meh!” www.bleepingcomputer.com/news/securit...

GitHub is in free-fall. 93% uptime and now we’re hearing about a breach cause they allowed some dev to install a VS Code extension on the devs browser

If anyone needs the malicious NX Console VS Code extension (GitHub dev breach), as detected by Agent Mesh, ping me. Updated extension is clean: agentmesh.knostic.ai/extensions/1... It was live for 38 minutes: github.com/nrwl/nx-cons... Nx Devtools CEO on the incident: x.com/jeffbcross/s...

The latest update for #Foresiet includes "#GitHub Internal Repositories Breached: Source Code and Internal Data Allegedly Exfiltrated in 2026 Supply Chain Attack". #cybersecurity #infosec https://opsmtrs.com/3J3CMGz

GitHub confirms hacker attack. ~3800 internal code repos compromised via a "poisoned" VS Code extension targeting employee devices. No evidence of customer data breach outside internal repos. Hackers use open-source projects to access dev machines.

GitHub confirms security breach via poisoned VS Code extension, exfiltrating data from ~3,800 internal repos. Incident contained. Binance founder CZ advises users to immediately review/rotate API keys in code, regardless of privacy. #crypto #blockchain #news

GitHub confirms security breach via malicious VS Code extension. Attackers accessed internal repos, exfiltrating data from ~3,800. Public services unaffected. 🚨 Security experts highlight supply-chain risks. Advised: Audit extensions & enable MFA. (Source: GitHub)

GitHub confirms data breach via malicious VS Code extension. Employee device compromised, impacting internal repos. Attackers claim ~3800 repos affected. GitHub is rotating credentials & investigating. Anthropic's Mythos tools potentially used. #crypto #blockchain #news

📰 GitHub has initiated an investigation into unauthorized access to their internal repositories, following reports of potential breaches. 🔗 https://twitter.com/github/status/2056884788179726685 #Tech #Dev

A malicious VS code extension just breached GitHub ‘s internal repositories One employee installed a trojanized VS Code extension. Result: ~3,800 GitHub internal repositories exfiltrated. TeamPCP claims credit, wants $50K. There is something almost ironic about GitHub, the platfo… #hackernews #news