GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.

The code hosting giant GitHub said it was investigating a breach but said there was no evidence of customer data theft.

Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers ...

Hackers exfiltrated roughly 3,800 of GitHub Inc.’s internal code repositories after one of its employees installed a poisoned Visual Studio Code extension, the Microsoft Corp.-owned developer platform ...

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.

TeamPCP exfiltrated 3,800 internal GitHub repositories after poisoning a VS Code extension. No customer data was affected, the company says.

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...