GitHub says hackers stole data from thousands of internal sites

GitHub, Microsoft’s popular platform, confirmed that it had been hacked and that attackers had stolen information from about 3,800 internal sites.

The code hosting and sharing giant said list of records on X that it “has no evidence of customer information stored outside of GitHub’s internal repositories,” but said its investigation is ongoing. GitHub said it has “aware of and has a vulnerability in a user device that includes the VS Code extension,” referring to the extension for Visual Studio Code, the popular code editor used by developers to develop software.

Hackers are increasingly targeting popular open source projects, including coding extensions, with the aim of compromising the computers of developers and their projects. Targeting popular projects allows hackers to access multiple computers at the same time, increasing their influence.

GitHub did not specify which extensions were compromised.

History and Computer Rest say that a criminal group called TeamPCP has taken credit for the GitHub breach, and is selling the content to cybercrime sites.

GitHub did not immediately respond to a request for comment on the incident, or respond to questions about whether it had received any messages from the hackers, such as a ransom demand.

TeamPCP previously claimed responsibility for a data breach at the European Commission that led to the theft of more than 90 gigabytes of data from cloud storage. EU chief executive. Hackers stole the European Commission’s cloud keys in an earlier breach of Trivy, a vulnerability analysis tool, in a push. info-stealing malware for lower Trivy users.

OpenAI too has recently targeted a similar but different attack which saw hackers break into Tanstack, a platform used by web developers, to push updates containing malware that allow hackers to steal passwords and tokens from users.