# @github: Employee device compromised via poisoned VS Code extension

Source: https://x.com/github/status/2056949168208552080?s=12

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.