GitHub's Internal Repositories Breached via Malicious VS Code Extension, Sparking Supply Chain Security Alarm
GitHub confirmed unauthorized access to its internal repositories, attributing the compromise to a poisoned VS Code extension. The incident highlights systemic vulnerabilities in developer tool supply chains and marketplace security, prompting urgent calls for platform owners to enhance security protocols.