GitHub Breached - Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos
RedSide Security May 20, 2026 Data Leaks & Breaches 85 views
GitHub is investigating unauthorized access to its internal repositories following a supply chain attack linked to the threat actor **TeamPCP**, who reportedly listed GitHub source code and internal data for sale on a cybercrime forum. The incident is part of an ongoing malware campaign targeting open-source ecosystems, including a compromised Microsoft Python package and a self-replicating infostealer known as Mini Shai-Hulud.
cybersecurity
vulnerability
exploitation
malware
phishing
supply-chain-attack
open-source
exploit
threat-actors
dark-web
npm
pypi
docker
credential-theft
osint
apt
news
incident-response
privilege-escalation
endpoint-security-threat-intelligence
rce
github
infostealer
ci-cd
aws-security
kubernetes
cloud-misconfigurations
data-breach
Continue reading: GitHub Breached - Employee Device Hack Led to Exfi…