答案已发布6天前Last edited 前天21 来源

一次VS Code扩展中毒，如何让攻击者进入GitHub的3800个内部仓库

2026年5月，GitHub确认一名员工安装恶意VS Code扩展后，其设备被攻陷，攻击者随后访问了约3800个GitHub内部代码仓库。[3][4] 恶意扩展可能窃取凭证或会话令牌，使攻击者能够以合法身份访问GitHub内部系统并外传数据。[6][7] 安全研究人员认为事件与TeamPCP组织的“Mini Shai‑Hulud”供应链攻击活动有关，该活动针对npm、PyPI、CI/CD系统和开发者工具窃取敏感信息。[32][33]

使用 Studio Global AI 搜索并核查事实浏览更多热门页面

700K0

Illustration of a malicious VS Code extension compromising GitHub repositories in a supply chain attack — What happened in the GitHub breach where a malicious VS Code extension led to the compromise of around 3,800 internal repositories, who wasA poisoned VS Code extension installed on an employee device allowed attackers to access thousands of GitHub’s internal repositories.
AI 提示
Create a landscape editorial hero image for this Studio Global article: What happened in the GitHub breach where a malicious VS Code extension led to the compromise of around 3,800 internal repositories, who was. Article summary: GitHub said an employee device was compromised through a poisoned VS Code extension, enabling unauthorized access to roughly 3,800 internal repositories; the attack was claimed by TeamPCP, the same actor tied to the “Min. Topic tags: general, general web. Reference image context from search candidates: Reference image 1: visual subject "A Trojanized VS Code Extension Let Hackers Into GitHub's Internal Repositories. GitHub confirmed on May 19–20, 2026, that an attacker accessed and exfiltrated data from roughly 3,8" source context "GitHub Internal Repos Breached via Poisoned VS Code Extension" Reference image 2: visual subject "# GitHub Confirms Breach of 3,800 R
openai.com

2026年5月，一起安全事件在开发者社区引发广泛关注：GitHub确认其约 3800个内部代码仓库 遭到未授权访问，而入口竟是一款被“投毒”的 Visual Studio Code（VS Code）扩展。这起事件再次提醒软件行业——开发工具本身已经成为攻击者的重要目标。

GitHub表示，攻击始于一名员工安装了恶意VS Code扩展，该扩展入侵了员工设备，并最终让攻击者获得了进入GitHub内部代码仓库的权限。

尽管攻击者声称窃取了大量内部数据，但GitHub在调查中表示，没有证据表明客户仓库、企业账户或用户数据受到影响。

事件是如何发生的

根据GitHub官方说明及安全媒体报道，这次事件的起点是一名员工从扩展市场安装了一个 被植入恶意代码的VS Code扩展。扩展安装后立即对该员工设备实施了控制。

Studio Global AI

Search, cite, and publish your own answer

Use this topic as a starting point for a fresh source-backed answer, then compare citations before you share it.

使用 Studio Global AI 搜索并核查事实

人们还问