GitHub experienced a compromise via a poisoned Visual Studio Code extension installed on an employee device, which led to unauthorized access to internal repositories. The company removed the malicious extension version and isolated the affected endpoint. The article is a brief incident notification and does not provide specific vulnerability details, CVSS scores, affected software versions, fixed versions, or workarounds.
GitHub (@github): "1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories. Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately." | XCancel