GitHub Confirms 3,800 Internal Repos Stolen Through Poisoned VS Code Extension

In brief

• GitHub says an employee installed a malicious VS Code extension that gave attackers access to roughly 3,800 internal repositories.
• The company says only GitHub-internal repos were affected, and no customer data outside those repositories was compromised.
• Hacker group TeamPCP is claiming credit and asking for at least $50,000 for the stolen code.