GitHub is investigating an alleged breach after TeamPCP claimed access to nearly 4,000 private repositories, though no impact on customer data has been confirmed.

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace

CISA is investigating after a contractor’s public GitHub repository exposed AWS GovCloud credentials, internal files, and passwords.

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on Microsoft’s official Visual Studio Marketplace for just 18 minutes on May 18 — gave threat group TeamPCP enough access to exfiltrate approximately 3,

GitHub is battling outages, security issues, and a talent exodus. is a senior correspondent and author of Notepad, who has been covering all things Microsoft, PC, and tech for over 20 years. When Microsoft announced it was acquiring GitHub in a $7.

GitHub has confirmed a cyberattack after a threat actor claimed to have stolen and listed company data for sale. The breach involved unauthorised access to internal repositories via a "poisoned" VS Code extension,