GitHub says hackers stole about 3,800 internal repos after a poisoned VS Code extension hit an employee device ...

A security researcher has publicly disclosed a new Visual Studio Code zero-day vulnerability that can reportedly let ...

A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.

Somewhere inside GitHub, a developer installed a Visual Studio Code extension. It looked like any other productivity plugin ...

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

GitHub, the world's biggest code repository and DevOps platform, fell victim to a malicious Visual Studio Code (VS Code) ...

A reported software supply chain attack involving a malicious Visual Studio Code extension has exposed the growing security ...

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...

The code hosting giant GitHub said it was investigating a breach but said there was no evidence of customer data theft.

GitHub confirmed a breach affecting about 3,800 internal repositories after an employee installed a malicious VS Code ...

GitHub hack exposed 3,800 internal repos through a poisoned VS Code extension, raising new concerns over developer supply ...

GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.