GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and authorship platform.

The threat group TeamPCP, formally tracked by Google Threat Intelligence Group as UNC6780, claimed responsibility and is advertising the stolen reposit

Technical Analysis

🚨 GitHub hit by massive data breach! 3,800 repos stolen through poisoned VS Code ext. 🛡️ #Tech #AI #TechNews

Key Points

  • GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and authorship platform.

  • The threat group TeamPCP, formally tracked by Google Threat Intelligence Group as UNC6780, claimed responsibility and is advertising the stolen reposit

Stay Informed

This story is actively developing. DigiviNews will continue to provide updates as more information becomes available. Follow us on all social platforms for real-time breaking news coverage in Ai and beyond.