HomeAI · summaries
Storia in 16 fonti
GitHub confirmed a breach last week that exposed around 3,800 internal repositories. The cause wasn't a zero-day. It was a VS Code extension.
Attackers took over the publisher token for Nx Console, which has about 2.2 million installs. They...
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
Nx Console 18.95.0 fetched a 498 KB stealer via GitHub orphan commit, exposing developer secrets and forcing credential rotation.
- ·
infoworld.com
GitHub admits major source code leak after 3,800 internal repositories breached
GitHub blamed the latest in a growing list of hacks claimed by TeamPCP on a poisoned VS Code extension.
- ·
forbes.com
GitHub Says 3,800 Repositories Breached—TeamPCP Hackers Demand $50,000
A GitHub employee has unwittingly allowed 3,800 internal repositories to be breached after a device compromise with a poisoned VS Code extension.
- ·
cointelegraph.com
GitHub Internal Repositories Breached via VS Code Extension
GitHub confirmed an attacker was able to access its internal repositories after a code extension breach, with TeamPCP claiming credit.
- ·
bleepingcomputer.com
GitHub confirms breach of 3,800 repos via malicious VSCode extension
GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.
- ·
securityweek.com
GitHub Confirms Hack Impacting 3,800 Internal Repositories
GitHub has confirmed that roughly 3,800 internal repositories were hacked after an employee installed an infected VS Code extension.
- ·
theregister.com
GitHub says internal repos exfiltrated after poisoned VS Code extension attack
Around 3,800 repositories of GitHub internal code have been exfiltrated, company rotates credentials as devs ponder the implications
- ·
tomshardware.com
Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000…
GitHub says it has already rotated critical secrets and credentials following the breach
- ·
heise.de
Attack on GitHub: Data from 3800 internal repositories stolen
GitHub has confirmed an attack via an extension for Visual Studio Code. The stolen data is apparently for sale on a cybercrime forum.
- ·
thenextweb.com
GitHub breached via poisoned VS Code extension, 3,800 repos stolen
TeamPCP exfiltrated 3,800 internal GitHub repositories after poisoning a VS Code extension. No customer data was affected, the company says.
- ·
dev.to
GitHub Got Breached Through a VS Code Extension. MCP Servers Are Next.
Yesterday, GitHub said it had detected and contained a compromise of an employee device involving a...
- ·
decrypt.co
GitHub Confirms 3,800 Internal Repos Stolen Through Poisoned VS Code Extension - Decrypt
TeamPCP gained access to GitHub's private source code after an employee unknowingly installed a malicious coding tool.
- ·
theverge.com
GitHub says a data breach impacted 3,800 internal repositories.
The company traced the incident to a “poisoned” VS Code extension on an employee’s device. While the hacking group TeamPCP has claimed responsibility for the breach, GitHub says…
- ·
venturebeat.com
GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft's Python SDK
GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP, simultaneously compromised Microsoft's durabletask…
- ·
github.blog
Investigating unauthorized access to GitHub's internal repositories
If any impact is discovered, customers will be notified via established incident response and notification channels.
- ·
GitHub Breach via VSCode Extension, ZTE Router CVE-2026-34472, & Public Repo Secrets Leaks
GitHub Breach via VSCode Extension, ZTE Router CVE-2026-34472, & Public Repo Secrets...
- ·
siliconangle.com
GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension - SiliconANGLE
GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension - SiliconANGLE
- ·
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.
- ·
3,800 GitHub repos got breached by one VSCode extension. Here's the 5-minute audit that saves yours.
GitHub just confirmed 3,800 repos got breached through one malicious VSCode extension. Here's the 5-minute audit every vibe coder should run tonight — before the next one ships.
- ·
GitHub links repo breach to TanStack npm supply-chain attack
GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm…