WuShuo has learned that GitHub released an update on a security incident, stating that their investigation uncovered a breach targeting employee devices, involving a poisoned VS Code extension. GitHub confirmed that the incident has been detected and contained, with the malicious extension version removed, affected endpoints isolated, and an emergency response initiated. Based on the current assessment, the attack appears to involve the leakage of internal GitHub repository data. The attackers claim to have accessed around 3,800 repositories, which aligns with the preliminary investigation findings. In response, Binance founder CZ posted a reminder: if your code contains API Keys, even in private repositories, you should immediately review and replace them. https://(wublock123.com)/news/github-internal-repos-unauthorized-access-3800-stolen-61369