News

GitHub confirms hackers stole thousands of internal code repositories after employee installed a poisoned VS Code extension

  • Darius Popa--The Next Web
  • published date: 2026-05-20 14:06:49 UTC

It is an unsettling irony when the world’s largest code-hosting platform becomes the victim of its own ecosystem. GitHub confirmed on Tuesday that a threat actor exfiltrated approximately 3,800 internal repositories after compromising an employee’s device thr…

TL;DR GitHub confirmed that the cybercrime group TeamPCP exfiltrated roughly 3,800 internal code repositories after compromising an employee device through a poisoned VS Code extension. The Microsof… [+4343 chars]