GitHub hit by hacker attack: Thousands of internal repositories stolen

GitHub, the developer platform owned by Microsoft, has confirmed it was hit by a cyberattack, with attackers stealing data from approximately 3,800 internal code repositories. In a statement on the X social network, the company noted there is no evidence that customer data stored outside of GitHub's internal systems was compromised, but investigations are ongoing. This is reported by Techcrunch.com .

According to GitHub, the breach occurred via a malicious VS Code extension installed on an employee's device. Visual Studio Code is one of the most popular code editors among developers, and hackers have recently been targeting users' computers through open-source projects and extensions.

Currently, a hacking group known as TeamPCP has claimed responsibility for the attack and has put the stolen data up for sale on a cybercriminal forum. GitHub has not yet provided an official comment on whether they have contacted the hackers or regarding any ransom demands. Previously, this group stole over 90 gigabytes of data from the European Commission's cloud storage.

By targeting popular projects, cybercriminals are gaining access to a large number of computers simultaneously. Recently, OpenAI was also the target of a similar attack. At that time, hackers compromised the Tanstack platform to distribute malicious updates designed to steal users' passwords and tokens.