

GitHub has disclosed a major cybersecurity breach in which hackers reportedly gained unauthorized access to thousands of the company’s internal repositories. According to initial findings, attackers accessed more than 3,800 GitHub internal repositories, though the Microsoft-owned platform clarified that there is currently no evidence of customer data theft. GitHub stated that the breach was traced to a compromised employee device affected by a malicious Visual Studio Code extension. The company confirmed that investigations are ongoing and that security teams are actively monitoring for any further suspicious activity while rotating sensitive credentials and reviewing system logs.
The incident comes amid a growing wave of cyberattacks targeting open-source AI and software development ecosystems. Several major projects and developer platforms, including Axios, LiteLLM, Trivy, TanStack, and Vercel, have faced similar attacks in recent months. Reports suggest that the hacking group “TeamPCP” has claimed responsibility for the GitHub breach and is allegedly attempting to sell stolen data on cybercrime forums. Cybersecurity experts warn that supply chain attacks involving coding tools and extensions pose a serious threat because they can compromise thousands of developer systems simultaneously. The breach has once again highlighted increasing global concerns around AI security, developer infrastructure, and software supply chain vulnerabilities.














Comments (0)
No comments yet
Be the first to comment!