MEDIUMData Breach
Global

GitHub Hacked, Internal Repositories Offered for Sale

·Source: Bank Info Security

Updated:

Executive Summary

A Single Developer Downloaded a Poisoned VS Code Extension, and Now Look GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a developer used a poisone

Analysis

A Single Developer Downloaded a Poisoned VS Code Extension, and Now Look GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a developer used a poisoned VS Code script, which is developed by Microsoft. TeamPCP and Lapsus$ appear to be cooperating to sell the stolen data for $95,000.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/github-hacked-internal-repositories-offered-for-sale-image_small-7-a-31739.jpg
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
Source Attribution

Originally published by Bank Info Security on May 20, 2026.

Related Threats