
GitHub Breached by Malicious VSCode Extension
CybersecurityHackingSoftwareVulnerabilitiesIncidentResponse
GitHub’s internal repositories were breached due to a malicious VSCode extension. The incident was reported via a status update on X (formerly Twitter). Microsoft previously closed a related request for update cooldowns in VSCode as "not planned." A new issue regarding the current attack has been opened in the VSCode GitHub repository.