GitHub breach shows how one bad extension can reach deep inside software teams
GitHub says a poisoned VS Code extension led to unauthorized access to internal repositories, underscoring how developer tooling has become a supply-chain risk.