NewsSOS
BREAKING: GitHub Hit as TeamPCP Claims 4,000 Private Repos for $50K BREAKING: A hacker crew calling itself TeamPCP says it has lifted source code from roughly 4,000 internal GitHub repositories.
The asking price on dark web forums: $50,000. Sample files are posted as proof. The group says if nobody buys, the full dataset drops for free.
The company says it detected and contained "unauthorized access to internal repositories" within minutes. JUST IN: GitHub points the finger at a poisoned VS Code extension installed on an employee device.
That extension acted as a backdoor. Attackers used it to pivot into GitHub's internal network. From there they moved laterally and pulled data from repo after repo.
Keep reading