GitHub says hackers stole data from thousands of internal repositories

GitHub confirmed attackers stole data from about 3,800 internal repositories after compromising an employee device with a malicious VS Code extension.

The company said customer data outside the internal repos was not affected, and the investigation is still ongoing.

The incident highlights how poisoned extensions and open-source supply chain attacks can expose large amounts of developer code and sensitive data.

It also raises broader concerns for organizations that rely on code editors, plugins, and shared software ecosystems.