The GitHub Breach Through VS Code Is the One I Warned About

If you haven&rsquo;t heard the news, GitHub confirmed unauthorized access to internal repositories through a malicious VS Code extension. I&rsquo;ve been warning about this. I predicted it would happen in my talk Compromising Developers with Malicious Extensions last December at Black Hat MEA, where I presented several flaws in VS Code and the marketplace and how people can use them to run supply…