Tech Times

500 Poisoned Packages, Hundreds of Companies: TeamPCP’s Worm Just Reached GitHub

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...
XDA Developers on MSN

A poisoned VS Code extension led to a GitHub breach, and Microsoft owns every link in the chain

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

Microsoft、「WinApp CLI」を「Visual Studio Code」に統合する拡張機能を発表

米Microsoftは5月4日（現地時間）、「Visual Studio Code」用の拡張機能「WinApp」を発表した。現在、パブリックプレビュー版v0.1.0を「Visual Studio Marketplace」から無償でダウンロード可能。
Spiceworks on MSN

Did AI write the worm that breached GitHub’s own house?

A single developer. One poisoned extension. Five supply chain surfaces compromised in 48 hours. And a threat group claiming ...