GitHub Internal Repos Stolen via VS Code Supply Chain Compromise

NEOSEC enrichment — no mirror of the original source

On Monday, May 18, 2026, GitHub detected that an employee device had been compromised through a malicious third-party VS Code extension, resulting in unauthorized access to and exfiltration of internal repositories. Upon discovery, the comp

Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.