GitHub Internal Repositories Breached Via Weaponized VS Code Extension

GitHub confirmed a significant security breach on May 18, 2026, after attackers leveraged a weaponized Visual Studio Code extension to compromise an employee’s device and exfiltrate data from the company’s internal source code repositories. The attack was detected and contained on Monday, May 18, when GitHub’s security team identified suspicious activity on an employee endpoint. […]

The post GitHub Internal Repositories Breached Via Weaponized VS Code Extension appeared first on Cyber Security News.