GitHub confirms an employee’s compromised device led to exfiltration of internal repositories via a poisoned VSCode extension Threat actors TeamPCP are selling an archive of roughly 4,000 repos on the dark web,

GitHub is battling outages, security issues, and a talent exodus. is a senior correspondent and author of Notepad, who has been covering all things Microsoft, PC, and tech for over 20 years. When Microsoft announced it was acquiring GitHub in a $7.

GitHub is investigating an alleged breach after TeamPCP claimed access to nearly 4,000 private repositories, though no impact on customer data has been confirmed.

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on Microsoft’s official Visual Studio Marketplace for just 18 minutes on May 18 — gave threat group TeamPCP enough access to exfiltrate approximately 3,