GitHub Confirms Internal Repository Breach via Malicious VS Code Extension (infosecurity-magazine.com)

• GitHub confirmed breach of internal repos via malicious VS Code extension.
• Threat group TeamPCP claimed responsibility.
• Extension published on VS Code marketplace.
• GitHub has taken containment measures.

"GitHub has confirmed a security breach involving internal repositories compromised through a malicious Visual Studio Code extension. The threat group TeamPCP claimed responsibility. The extension was available on the VS Code marketplace and tricked developers into installing it. GitHub has taken containment measures."