GitHub's Internal Repos Were Breached

2026-05-21

GitHub confirmed attackers stole data from around 3,800 internal code repositories after a compromised employee device was infected through a malicious VS Code extension. The company says it has no evidence that customer repositories, organizations, or enterprise data were impacted, but the incident is another reminder that developer tooling is now a major supply-chain attack surface.