GitHub Was Breached Through a Single VS Code Extension.

One employee. One poisoned extension. One click on the VS Code Marketplace. And TeamPCP walked out with 3,800 of GitHub’s internal…