GitHub Breach 2026: How a Malicious VS Code Extension Triggered a Massive Supply Chain Attack
GitHub confirmed 3,800 internal repos were breached by TeamPCP via a poisoned VS Code extension in May 2026. Here's exactly how it happened.
Tag CI/CD poisoning