26
GitHub confirms breach of 3,800 repos via malicious VSCode extension (www.bleepingcomputer.com)
submitted 5 months ago by to c/databreaches@lemmy.zip
2 comments fedilink hide all child comments
 

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

Follow up to https://lemmy.zip/post/64666730

all 2 comments

sorted by: hot top controversial new old
[–] 12 points 5 months ago

For anyone who just read the title, it was repositories of the GitHub source code itself that were breached. Not private repositories belonging to users.

  • permalink
  • fedilink
  • source
    •
    [–] 6 points 5 months ago

    You think an org like github/Microsoft would be running extension allow lists on vscode.

  • permalink
  • fedilink
  • source
    •
    3 comments in c/technology@lemmy.world view that post
    [–] 21 points 5 months ago (1 child)

    Well that engineer is fired.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 9 points 5 months ago

    Safe in ed.

  • permalink
  • fedilink
  • source
    •
    1 comment in c/technology@lemmy.org view that post
    [–] 1 point 5 months ago

  • permalink
  • fedilink
  • source
    •