← Back to Feed
GitHub internal repositories breached
May 20, 2026 · Sophos Threat Research · Severity: MEDIUM
<p>A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum</p>Categories.
Key Takeaways
- Sophos reported that GitHub internal repositories were breached when a malicious VS Code extension led to cloned private repositories.
- The cloned private GitHub repositories were reportedly offered for sale on a criminal forum after the VS Code extension breach.
- Developers should vet VS Code extensions and third-party tooling, since malicious extensions can expose private source code.