The tweet was deleted by the author.
But we saved everything 🙂.
GitHub confirms security incident via сompromised VS Code extension
GitHub, the Microsoft-owned platform, has confirmed that attackers gained unauthorized access to its internal repositories by compromising an employee’s device through a malicious Visual Studio Code extension. The company detected the breach, isolated the affected endpoint, removed the harmful extension, and immediately launched an incident response.
Highlights
- Attackers accessed around 3,800 internal GitHub repositories.
- The breach occurred through a malicious Visual Studio Code extension on an employee’s device.
- The incident affected only internal systems; customer data was not compromised.
- Group TeamPCP is trying to sell the stolen data for over $50,000.
Scope of the breach
According to CoinPedia, GitHub stated that the number of affected internal repositories—approximately 3,800—aligns with the attacker’s claims. The cybercriminal group TeamPCP has claimed responsibility and is reportedly attempting to sell the stolen data on underground forums for more than $50,000. The leaked materials reportedly include proprietary source code and internal organizational files.
Importantly, GitHub emphasized that the breach was limited to its internal systems. Customer repositories, enterprise organizations, and user data stored outside internal GitHub systems were not affected.
Company response
GitHub acted quickly after discovery: it isolated the compromised device, revoked and rotated critical credentials (prioritizing the most sensitive ones), and continues to monitor for any secondary activity. The company said it will publish a more detailed report once the investigation is complete and will notify customers through official channels if any customer data is found to be impacted.
Security experts recommend that all developers review and rotate API keys and credentials stored in their repositories as a precautionary measure, even if their repositories were not directly affected.
GitHub has rotated critical secrets and is actively monitoring for further activity.
Rising risks in developer toolchains
This incident serves as a stark reminder of how vulnerable even the largest technology platforms can be. An attack delivered through a seemingly routine developer tool—a VS Code extension—highlights the growing threat to the software supply chain.
For millions of developers worldwide, it underscores the need for greater vigilance: regularly auditing installed extensions, practicing strict credential hygiene, and maintaining strong security awareness. While GitHub responded swiftly, the full implications of the breach may take time to become clear as the investigation continues.
Earlier, we reported that hackers used GitHub for crypto crimes.
This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.
Subscribe to TU news
Did you like the article?
Latest Microsoft News
Weekly Top Bonuses
Top News
Top 5 companies for you
United States
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
