News for hackers. Stuff that matters.

A comment on GitHub confirms breach of 3,800 repos via malicious VSCode extension. Parent comment

Re:GitHub confirms breach of 3,800 repos via malicious VSCod... by a_t48 on Wednesday May 20, 2026 @06:54PM (#48215423)
This is a continual fight for me. At nearly every company I've had to compromise on using a graveyard repo for packages within a monorepo, even though git has the whole history already.
[ Parent | on HN ]
Re:GitHub confirms breach of 3,800 repos via malicious VSCod... by Sander_Marechal on Thursday May 21, 2026 @02:44AM (#48218777)
The problem with history is that you need to know when to look. If you're looking for some old code that you know existed but you don't know exactly what it was, you can't just browse to go and find it.
[ Parent | on HN ]
Re:GitHub confirms breach of 3,800 repos via malicious VSCod... by a_t48 on Thursday May 21, 2026 @02:57AM (#48218873)
Sure, but beyond a certain point the code that's there isn't just drop in compatible.
[ Parent | on HN ]