GitHub confirms breach of 3,800 repos via malicious VSCode extension

GitHub experienced a breach affecting approximately 3,800 internal repositories after an employee installed a malicious VS Code extension. The incident is linked to a broader supply chain attack by TeamPCP, who are demanding a ransom for the stolen code. While initial investigations suggest no customer data was compromised, the vulnerability highlights risks associated with third-party extensions and supply chain attacks.