3,800 Repos, One Poisoned Extension: GitHub Breached
TeamPCP breached GitHub via a poisoned VS Code extension: 3,800 internal repos, Copilot and CodeQL source exposed, now for sale on BreachForums.
2 posts
TeamPCP breached GitHub via a poisoned VS Code extension: 3,800 internal repos, Copilot and CodeQL source exposed, now for sale on BreachForums.
ShinyHunters breached Vercel and is selling its databases and GitHub/NPM tokens for $2M. With 6M weekly Next.js downloads, the blast radius is huge.