GitHub breached via a malicious VS Code extension: why developer devices are the real target

GitHub confirmed a poisoned VS Code extension compromised an employee device, exposing 3,800 internal repos. Why developer workstations are now the top supply chain target. Category: Vulnerabilities & Threats