Post by vx-underground on X
vx-underground@vxunderground
XGitHub, a company owned by Microsoft, was compromised.
A GitHub employee browsing the VS Code marketplace, an asset owned and operated by Microsoft, inadvertently donated a malicious VS Code extension, which Microsoft offers guidance and best practices on to avoid

4.6K likes57 repliesPosted May 20, 2026