GitHub investigates unauthorized access to internal repositories after TeamPCP sale claims
The Facts
- GitHub said it is investigating unauthorized access to its internal repositories after TeamPCP claimed responsibility for the breach.
- Multiple reports say TeamPCP claimed to have obtained GitHub source code and internal organizational data and offered the material for sale online.
- GitHub said it has not found evidence that customer information stored outside its internal repositories, such as customer organizations or repositories, was affected.
- GitHub said the incident involved a compromised employee device and a malicious or poisoned Visual Studio Code extension.
- GitHub said its current assessment is that the activity involved exfiltration of GitHub-internal repositories only.
- GitHub said the attacker claim of about 3,800 repositories is broadly consistent with its investigation so far.
- GitHub said it removed the malicious extension, isolated the affected endpoint, and began incident response measures after detecting the compromise.
- The incident matters beyond GitHub itself because the platform is widely used to host and manage software code, so a breach of internal systems raises broader software supply-chain and credential-security concerns even as customer repositories have not been confirmed affected.
How left and right are reading this
- Both agree
- A breach confined so far to GitHub’s internal repositories is still a serious security failure because a widely used code platform’s internal systems can create broader supply-chain and credential risks even without confirmed impact on customer repositories.
- They split on
- Less a disagreement than a question of emphasis: the systemic danger of a single compromised device and poisoned extension on critical software infrastructure, versus the importance of containment and the fact that customer data outside internal repositories has not been found affected.
Analytical frames for this storyTap to explore
Context
What does GitHub say was affected?
GitHub said its current assessment is that the incident involved GitHub-internal repositories, and it said it has no evidence so far that customer information stored outside those repositories was impacted Onliner,Times of India,Cointelegraph.
How did GitHub say the breach happened?
GitHub said it detected and contained a compromise of an employee device involving a malicious or poisoned VS Code extension. It said the extension was removed, the endpoint was isolated, and incident response began immediately Times of India,ZN.UA,Cointelegraph.
What is still unresolved?
GitHub is still investigating the validity and scope of TeamPCP's claims, including the full extent of what was taken and whether there will be any follow-on activity. Reports cite GitHub as saying the attacker claim of roughly 3,800 repositories is consistent with the investigation so far, but the review is ongoing TechNadu,TheRegister.com,IT Security News - ….
View all 109 sources
Wire services (4)
APInternational Business Times, Singapore EditionGitHub Investigates Major Hack Claim as TeamPCP Offers 4,000...
Independent coverage (50)
Portal TelaGitHub confirma acesso não autorizado a repositórios interno...
WinBuzzerGitHub Says VS Code Breach Exposed 3,800 Repositories
Cyber Security NewsGitHub Internal Repositories Breached Via Weaponized VS Code...
NotebookcheckVS Code supply chain attack hits GitHub, OpenAI, and Mistral...
ComputingGitHub confirms major breach linked to poisoned VS Code exte...
internet.cnmo.com黑客组织发起大规模投毒开源代码：波及数百机构 - CNMO科技
Crypto BriefingTeamPCP breaches GitHub, accessing 3,800 internal code repos...
WiredA Hacker Group Is Poisoning Open Source Code at an Unprecede...
Economic TimesMicrosoft's GitHub confirms cyberattack involving unauthoris...
europa pressGitHub confirma la filtración de 3.800 repositorios por un a...
TechNaduGitHub Breached via Malicious Nx Console VS Code Extension
Windows Report | Error-free Tech LifeGitHub Links Internal Repository Breach To TanStack Supply-C...
nextinpactGitHub s'est fait dérober des données de plusieurs milliers ...
蕃新聞AI大戲 2 -「安全性規範」與「技術指標」上，展現了 Anthropic 對於 「失控 AI 代碼」 的高度警覺 ...
iXBT.comGitHub взломали через расширение VS Code: хакеры заявили о к...
Guru3D.comMalicious VS Code Extension Linked to Theft of 3,800 GitHub ...
The Cyber ExpressGitHub Cyberattack Linked To TeamPCP VS Code Hack
The Hans IndiaGitHub Security Breach: 3,800 Internal Repositories Compromi...
heise onlineAttack on GitHub: Data from 3800 internal repositories stole...
The Indian ExpressGitHub confirms hackers stole data from 3,800 internal repos...
TecnologiaHackers invadem plataforma GitHub e roubam dados internos
SiliconANGLEGitHub confirms breach of 3,800 internal repos after employe...
CryptoPotatoCo-fundador de Binance urge a los desarrolladores a cambiar ...
TecMundoMini Shai-Hulud: nova campanha atinge mais de 320 pacotes NP...
CryptoPotatoGitHub Internal Repos Breached; Binance's CZ Urges Urgent Ke...
Dark ReadingGitHub Confirms Breach, 4K Internal Repos Stolen
DataBreachTodayGitHub Hacked, Internal Repositories Offered for Sale
iTnewsGitHub compromised, allegedly by TeamPCP
FinanceFeedsGitHub Probes Internal Repository Breach Following Unauthori...
WebProNewsGitHub's Internal Repos Breached: How a Poisoned VS Code Ext...
InfoWorldGitHub admits major source code leak after 3,800 internal re...
DevOps.comGitHub Breach Tied to Malicious VS Code Extension Exposes Th...
HotHardwareGitHub Breach Exposes 3,800 Internal Repos via Poisoned VS C...
VentureBeatGitHub confirms 3,800 internal repos stolen through poisoned...
TecMundoGitHub confirma invasão e tem 3.800 repositórios internos co...
TecnoblogGitHub confirma invasão e roubo de milhares de repositórios ...
RocketNews | Top News Stories From Around the GlobeGitHub confirms 3,800 internal repos stolen through poisoned...
DecryptGitHub Confirms 3,800 Internal Repos Stolen Through Poisoned...
pcgamerDevs, be careful what you plug in: GitHub security breach wa...
PCMag AustraliaHackers Infiltrate GitHub by Compromising Employee Device
Live Bitcoin NewsGitHub Got Hit Through a Poisoned VS Code Extension Nobody S...
Olhar Digital - O futuro passa primeiro aquiHackers invadem GitHub e roubam milhares de dados
The Tech PortalHackers stole data from Github internal repositories in rece...
The CyberWireGitHub discloses breach of 3,800 internal code repositories.
CyberScoopGitHub says internal repositories were taken in poisoned VS ...
FirstpostInside the GitHub Breach: The suspicious extension that expo...
The Next WebGitHub breached via poisoned VS Code extension, 3,800 repos ...
Clubic.comGitHub piraté via une extension VS Code malveillante
astera.ruGitHub сообщил о компрометации внутренних репозиториев после...
HipertextualGitHub confirma el robo de miles de repositorios tras un hac...
About these frames
The Watchdog: Wrongdoing, responsibility, corruption, transparency. Who knew what, when, and what they did about it.
The Advocate: Liberty, speech, privacy, autonomy, rights, consent, choice. What freedoms are at stake.
The Architect: Stability, law, enforcement, institutional design, separation of powers, regulatory process, rule of law. How are order and governance maintained?
See this differently than someone you know would? Two ways to keep it going.
The dial works on any URL — paste an article you read elsewhere this week.