The signal that matters.

GitHub Internal Repositories Breached Through Malicious VS Code Extension

GitHub confirmed that attackers accessed and exfiltrated data from internal repositories after an employee device was compromised by a trojanized Visual Studio Code extension obtained through the official marketplace. The company said it detected and contained the intrusion, isolated the affected endpoint, removed the malicious extension version, rotated critical secrets and credentials, and began continuous log analysis and incident response. GitHub’s current assessment is that the breach affected only GitHub-internal repositories, with no confirmed evidence that public repositories, customer-hosted repositories, or customer data stored outside those repositories were compromised.