NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

GitHub confirms breach of 3,800 repos via malicious VSCode extension

BACKGROUND
1 SIGNALFIRST DETECTED 20 May 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
21 May
GitHub links repo breach to TanStack npm supply-chain attack

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm

REPORT · WHO · BleepingComputerOPEN STORY
20 May
GitHub investigates internal repositories breach claimed by TeamPCP

GitHub is investigating a breach of its internal repositories after the TeamPCP hacker group claimed to have accessed approximately 4,000 repositories containing private code.

REPORT · WHAT · BleepingComputerOPEN STORY
20 May
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories

GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform's source code and

REPORT · WHO · The Hacker NewsOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →