GitHub Internal Repos Breached; Binance’s CZ Urges Urgent Key Rotation
Share:
A malicious VS Code extension was used to compromise an employee machine and give attackers access to GitHub’s internal repositories, and an actor claiming to be TeamPCP is allegedly selling roughly 4,000 private repos on a cybercriminal forum with a minimum asking price of $50,000. This poses acute security risks for crypto and DeFi projects hosted on GitHub—potential exposure of private keys, smart contract code, token launch data and integration secrets could lead to exploits, compromised token listings and broader contagion across DEXs and CEXs.
Predictions Markets
See what traders are focused on
Earlier today, hackers gained access to GitHub’s internal repositories by exploiting an employee’s computer with the use of a tainted VS Code extension.
Following the incident, reports emerged that a threat actor using the alias TeamPCP was now allegedly selling what they claim is roughly 4,000 of GitHub’s private repositories on a cybercriminal forum, with a minimum asking price of $50,000.
