GitHub Investigates Unauthorized Access to Internal Repositories Following Employee Device Compromise

GitHub said on Wednesday it is investigating unauthorized access to its internal repositories following the compromise of an employee's device, with a malicious VS Code extension detected and contained on Tuesday. The developer platform stated it currently has no evidence of impact to customer data stored outside its internal repositories.

Hacking group TeamPCP has claimed responsibility for the compromise and attempted to sell GitHub data online, claiming to possess 4,000 private code repositories related to GitHub's main platform and internal organizations, according to SecurityWeek.