News for hackers. Stuff that matters.

A comment on GitHub confirms breach of 3,800 repos via malicious VSCode extension. Parent comment

Re:GitHub confirms breach of 3,800 repos via malicious VSCod... by Gigachad on Wednesday May 20, 2026 @07:27PM (#48215763)
Probably most of them are forks of some public repo with some patch applied and half of those are probably not even used internally anymore.
[ Parent | on HN ]
Re:GitHub confirms breach of 3,800 repos via malicious VSCod... by ashishb on Wednesday May 20, 2026 @09:01PM (#48216456)
Afaik, they eventually cleaned it up.

And it was each team owning multiple internal repos of their own deployments/libraries, and not, primarily, clones of public repos.

[ Parent | on HN ]