GitHub Internal Repository Breach via Malicious VS Code Extension

Summary

GitHub reported that roughly 3,800 internal repositories were breached after an employee installed a malicious VS Code extension. The company isolated the device, rotated secrets, and removed the trojanized plugin from the marketplace.

Read the full article on BeyondMachines

---

This article was originally published on BeyondMachines