GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.

Hackers exfiltrated roughly 3,800 of GitHub Inc.’s internal code repositories after one of its employees installed a poisoned Visual Studio Code extension, the Microsoft Corp.-owned developer platform ...

Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers ...

The code hosting giant GitHub said it was investigating a breach but said there was no evidence of customer data theft.