GitHub confirms breach of 3,800 repos via malicious VSCode extension

2026-05-21

GitHub confirmed that approximately 3,800 internal code repositories were compromised after an employee unknowingly installed a malicious Visual Studio Code extension.