The Hacker News

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Researchers uncover 7,600 FakeGit GitHub repos, including 800 AI skills and MCP lures spreading SmartLoader malware.
Hosted on MSN

GitHub investigates unauthorized access to internal repositories

GitHub said on Wednesday it is investigating unauthorized access to its internal repositories following the compromise of an employee's device. “While we currently have no evidence of impact to ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
CoinTelegraph

GitHub investigates unauthorized access to internal repositories

GitHub said the activity involved the exfiltration of about 3,800 internal repositories, and it removed the malicious code extension. GitHub said on Wednesday it is investigating unauthorized access ...