CERT243,800 GitHub internal repositories compromised via malicious VS Code extensionLoading data…
CERT24Threat Observatory
Period

3,800 GitHub internal repositories compromised via malicious VS Code extension

GitHub confirmed that approximately 3,800 internal repositories were compromised after an employee installed a malicious VS Code extension. GitHub’s current assessment is that the activity involved exfiltration of GitHub-internal repositories only. The company said it has no evidence that customer data stored outside the affected repositories was affected.

← Back to intelligence

3,800 GitHub internal repositories compromised via malicious VS Code extension

GitHub confirmed that approximately 3,800 internal repositories were compromised after an employee installed a malicious VS Code extension. GitHub’s current assessment is that the activity involved exfiltration of GitHub-internal repositories only. The company said it has no evidence that customer data stored outside the affected repositories was affected.