As cited
Copy frozen at (site build).
breaches incidents
GitHub internal repositories breached
A malicious Visual Studio Code (VS Code) extension resulted in cloned private repositories from GitHub, with the stolen data reportedly being offered for sale on criminal forums. The incident highlights supply chain risks through developer tools and the potential exposure of sensitive code repositories.
Why it matters: Organizations using compromised VS Code extensions face immediate risk of private repository theft and intellectual property exposure, requiring urgent review of extension installations and repository access logs.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
GitHub internal repositories breached
A malicious Visual Studio Code (VS Code) extension resulted in cloned private repositories from GitHub, with the stolen data reportedly being offered for sale on criminal forums. The incident highlights supply chain risks through developer tools and the potential exposure of sensitive code repositories.
Why it matters: Organizations using compromised VS Code extensions face immediate risk of private repository theft and intellectual property exposure, requiring urgent review of extension installations and repository access logs.
- Source published
- First seen by Cybersecurity Tracker