\n<\/p>\n
GitHub, the popular developer platform owned by Microsoft, confirmed it was hacked and attackers had stolen data from around 3,800 internal code repositories.<\/p>\n
The code hosting and sharing giant said in a series of posts on X<\/a> that it has \u201cno evidence of impact to customer information stored outside of GitHub\u2019s internal repositories,\u201d but noted its investigation was ongoing. GitHub said it \u201cdetected and contained a compromise of an employee device involving a poisoned VS Code extension,\u201d referring to a plugin for Visual Studio Code, a popular code editor that developers use for programming.<\/p>\n Hackers are increasingly targeting popular open-source projects, including coding extensions, with the aim of compromising developers\u2019 computers and their projects. Targeting popular projects allows hackers to gain access to vast numbers of computers at the same time, magnifying the impact of their attacks.\u00a0<\/p>\n GitHub did not name the compromised extension.<\/p>\n The Record<\/a> and Bleeping Computer<\/a> report that a hacking group called TeamPCP has taken credit for the GitHub breach, and is selling the data on a cybercrime forum.<\/p>\n GitHub did not immediately respond to a request for comment about the incident, or answer questions on whether it has received any communication from the hackers, such as a demand for ransom.<\/p>\n TeamPCP previously claimed credit for a data breach at the European Commission that resulted in the theft of more than 90 gigabytes of data from the cloud storage of the EU\u2019s executive arm<\/a>. The hackers had stolen the European Commission\u2019s cloud key during an earlier breach at Trivy, a vulnerability scanning tool, by pushing info-stealing malware<\/a> to Trivy\u2019s downstream users.<\/p>\n OpenAI was also targeted recently in a similar but separate attack<\/a> that saw hackers break into Tanstack, a platform used by web developers, to push updates containing malware that let the hackers steal passwords and tokens from users.<\/p>\n<\/div>\n When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n