Egonallanon comments on GitHub confirms breach of 3,800 repos via malicious VSCode extension

submitted 5 months ago by BrikoX@lemmy.zip to c/databreaches@lemmy.zip

2 comments fedilink hide all child comments

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

you are viewing a single comment's thread
view the rest of the comments

[–] Egonallanon@feddit.uk 6 points 5 months ago

You think an org like github/Microsoft would be running extension allow lists on vscode.