GitHub Breach 2026: How a Malicious VS Code Extension Triggered a Massive Supply Chain Attack

GitHub confirmed 3,800 internal repos were breached by TeamPCP via a poisoned VS Code extension in May 2026. Here's exactly how it happened.

GitHub confirmed 3,800 internal repos were breached by TeamPCP via a poisoned VS Code extension in May 2026. Here's exactly how it happened.