GitHub Got Hit Through a Poisoned VS Code Extension Nobody Saw Coming

Drift Protocol said its insurance fund was not affected by the recent attack and that users who staked into the fund will be able to withdraw their shares normally once the protocol is brought back online. Drift said in an…

TeamPCP gained access to GitHub's private source code after an employee unknowingly installed a malicious coding tool.

Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers exfiltrated code from around 3,800 of the company’s internal repositories. News of the incident first emerged on May 19, when GitHub said it was investigating “unauthorized access.” Hours later, the company’s X account confirmed the worst: “Yesterday we detected and contained a compromise of an employee device involving a poisoned VS [Visual Studio] Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately,” GitHub said. “Our current assessment is that the activity involved exfiltration of GitHub-internal repositories only. The attacker’s current claims of ~3,800 repositories are directionally consistent with our investigation so far.” GitHub added: “We continue to analyze logs, validate secret rotation, and monitor for any follow-on activity. We will take additional action as the investigation warrants.” Th

From your first backtest to a real trading system, here are GitHub repos that can seriously level up your quant trading skills fast.

A self-replicating worm that hijacks GitHub Actions pipelines to publish malicious npm packages has struck again, compromising AntV, echarts-for-react, and Microsoft’s durabletask SDK. Mini Shai-Hulud Exploits GitHub Actions to Hit 16 Million Weekly Downloads The Mini Shai-Hulud campaign, attributed to the threat group Team PCP, does not work the way most supply chain attacks do […]

GitHub said the activity involved the exfiltration of about 3,800 internal repositories, and it removed the malicious code extension.

GitHub has confirmed that thousands of its internal repositories were accessed without authorization, prompting fresh warnings from Binance founder Changpeng “CZ” Zhao for crypto developers to immediately rotate API keys stored in code repositories. According to a statement published by…

This incident underscores the critical need for robust security practices in managing cloud credentials, highlighting potential supply chain vulnerabilities. The post CISA exposed plaintext passwords and cloud keys on GitHub for six months appeared first on Crypto Briefing.