GitHub investigates internal repositories breach claimed by TeamPCP

GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform's source code and

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

<a href="https://news.ycombinator.com/item?id=48201316">Comments</a>

The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension. [...]