GitHub Breach 2026: Poisoned VS Code Extension Stole 3,800 Internal Repositories in 18 Minutes
A poisoned VS Code extension was live on the official marketplace for 18 minutes. That was enough for TeamPCP to steal 3,800 GitHub internal repositories. Full attack chain, payload analysis, IOCs, and remediation steps inside.