The Extension Blind Spot: How One VS Code Plugin Gave Attackers GitHub's Source Code

The Extension Blind Spot: How One VS Code Plugin Gave Attackers GitHub’s Source Code

GitHub's 3,800 Repositories Stolen Through a Single IDE Extension On May 19, 2026, a single VS Code extension on a single employee's device gave attackers access to 3,800 of GitHub's internal repositories ...