A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has ...
India Today on MSN

GitHub suffers breach in internal code, hackers claim they have source code for sale

GitHub's source code is allegedly on sale online. Hackers claim that they will release it for free if they don't find a buyer ...
InfoWorld

GitHub admits major source code leak after 3,800 internal repositories breached

Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers ...

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply ...

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...

GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code ...

GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension - SiliconANGLE ...
Infosecurity Magazine

GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 ...

Claude Code源码「换壳」反杀，全网疯狂克隆，Anthropic封杀失败

爆了爆了！Claude Code源码库彻底火了，60k人深夜疯狂Fork。Anthropic紧急出手，GitHub原作者凌晨4点用Python、Rust重洗代码。 上线不过24小时，Claude Code「源码」仓库直接杀疯！ 没想到，最离谱的一幕出现了：Fork数竟碾压Star数，全网60k人连夜「搬运」代码。 如今，51.2万行TypeScript源代码在全网裸奔，几乎人人都在clone。 就 ...

GitHub Hack Scare: Attackers Claim They Stole Internal Source Code, Thousands of Private ...

A major cyber scare has hit GitHub, with hackers from TeamPCP claiming they accessed nearly 4,000 private repositories, ...

GitHub面临生存之战！多位员工曝内部乱象：独立文化要没了，封杀 ...

在微软内部，如今的 GitHub 正在遭遇一场生存级别的危机。 当微软在 2018 年宣布以 75 亿美元收购 GitHub 时，开发者们曾感到不安。一些人担心微软会控制这家全球最大的代码托管平台，另一些人则选择观望。将近八年后的今天，GitHub 陷入前所未有的生存考验，一连串的服务宕机、安全问题以及来自竞争对手的压力正叠加冲击着这家公司。 近日，有多家外媒报道称，微软内部已发出示警。与此同时， ...
Decrypt

GitHub Confirms 3,800 Internal Repos Stolen Through Poisoned VS Code Extension

TeamPCP gained access to GitHub's private source code after an employee unknowingly installed a malicious coding tool.
Bleeping Computer

Claude Code leak used to push infostealer malware on GitHub

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...