GitHub: 3,800 repos compromised by malicious VS Code extension

KEY TAKEAWAYS

• GitHub has identified a malicious VS Code extension as the source of the breach
• Around 3,800 internal repositories were compromised, with no evidence of customer data access
• The hacker group TeamPCP has claimed responsibility for the attack, demanding a ransom of at least $50,000
• VS Code extensions are a common vector for supply chain attacks, with previous cases of malicious extensions