GitHub, a company owned by Microsoft, was compromised. A GitHub employee browsing the VS Code ma...

Summary

A GitHub employee was compromised after installing a malicious Visual Studio Code extension from the VS Code Marketplace. The incident highlights supply chain risks within Microsoft-owned ecosystems, where trusted platforms can be vectors for malware distribution. Microsoft maintains guidance on securing extension installations, yet the marketplace was exploited to target an insider.

Indicators of Compromise

• malware — malicious VS Code extension

Entities