GitHub Faces Credential Theft and Internal Repository Exfiltration

Summary

A GitHub campaign pushed 5,718 malicious commits across 5,561 repositories, stealing CI secrets. Separately, GitHub reported internal repository exfiltration after an employee installed a malicious VS Code extension; Team PCP claimed it was selling data.

Key points

• The Megalodon campaign pushed 5,718 malicious commits to 5,561 repositories in six hours, using GitHub Actions workflows to steal CI secrets, cloud credentials, SSH keys, OIDC tokens and source-code secrets.
• The attackers used compromised personal access tokens or deploy keys and forged author identities to make commits resemble routine CI maintenance.
• Hudson Rock reported that 33% of 978 usernames used in the campaign directly matched computers and usernames previously affected by infostealers; it said email matches supported further links.
• GitHub reported that a GitHub employee installed the malicious Annex Console VS Code extension and that only GitHub internal repositories were affected. The exposed material included customer-support conversations and other customer information.
• GitHub identified the compromise on May 18, 2026, and began remediation, including rotating high-impact credentials. Team PCP claimed it was selling exfiltrated data for at least $50,000 and threatened to leak it if no buyer emerged.
• The video also reports that Discord made end-to-end encryption standard for voice and video calls, and that OpenAI and 1Password partnered to let AI coding agents access credentials to help prevent accidental publication.

Vendors

Products