GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

GitHub experienced a breach originating from an employee device compromised by a poisoned Microsoft Visual Studio Code extension. The attacker exfiltrated over 3,800 internal repositories, facilitated by the threat actor TeamPCP, who listed the code for sale. This incident involved the deployment of a sophisticated infostealer targeting credentials across various cloud providers and developer tools, utilizing a supply chain attack via a modified Microsoft Python client (durabletask).