GitHub confirms breach, 3,800 internal repos exfiltrated via malicious VS Code extension
GitHub confirmed that a trojanized update to the Nx Console Visual Studio Code extension allowed attackers to exfiltrate roughly 3,800 internal repositories. One employee installed the poisoned extension, which harvested developer credentials and let attackers copy repository contents across GitHub's internal infrastructure. A group calling itself TeamPCP claimed responsibility and demanded a $50,000 ransom for the stolen code and data. The incident highlights how compromised developer tooling can become a supply-chain attack vector, forcing companies to tighten vetting of IDE extensions and secrets management.
info on the github breach appears to only be available on xitter 🙄 , I fished it out for you. #github
abadidea15gonna gently push back that there's no reason (according to github's version of the story) to associate this with AI or with spectacular incompetence on the part of the employee; the issue is that industry standard, extremely widely used text editor Visual Studio Code has a big button that says […]
Ryan Finnie9@0xabad1dea My favorite take so far: "holy shit, how did the attackers find a large enough uptime window to get in?"
tmaher2@0xabad1dea thank you for the fishing
