Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.
GitHub confirmed a breach affecting about 3,800 internal repositories after an employee installed a malicious VS Code ...
The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 ...
GitHub internal repositories breached via malicious VS Code extension; TeamPCP demands $50K for 3,800 stolen repos May 2026.