GitHub confirms breach of 3,800 repos via malicious VSCode extension

Sergiu Gatlan reports: GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension. The company has since removed the unnamed trojanized extension from the VS Code marketplace and has secured the compromised device. “Yesterday we detected and contained a compromise of an employee device…

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

Source

Article Link: https://databreaches.net/2026/05/21/github-confirms-breach-of-3800-repos-via-malicious-vscode-extension/?pk_campaign=feed&pk_kwd=github-confirms-breach-of-3800-repos-via-malicious-vscode-extension