GitHub investigates unauthorized access to internal repositories after TeamPCP sale claims

What does GitHub say was affected?

GitHub said its current assessment is that the incident involved GitHub-internal repositories, and it said it has no evidence so far that customer information stored outside those repositories was impacted Onliner,Times of India,Cointelegraph.

How did GitHub say the breach happened?

GitHub said it detected and contained a compromise of an employee device involving a malicious or poisoned VS Code extension. It said the extension was removed, the endpoint was isolated, and incident response began immediately Times of India,ZN.UA,Cointelegraph.

What is still unresolved?

GitHub is still investigating the validity and scope of TeamPCP's claims, including the full extent of what was taken and whether there will be any follow-on activity. Reports cite GitHub as saying the attacker claim of roughly 3,800 repositories is consistent with the investigation so far, but the review is ongoing TechNadu,TheRegister.com,IT Security News - ….