GitHub Says Malicious VS Code Extension Led to Theft of About 3,800 Internal Repositories
GitHub says an attack using a malicious Visual Studio Code extension led to theft of about 3,800 internal repositories. It removed the extension, isolated affected endpoints and rotated security keys; log analysis continues.