Breaking through employee devices, social engineering is always the shortest path

Mars Finance News: According to GoPlus monitoring, the hacker organization TeamPCP claims to have obtained source code from approximately 4,000 private repositories on GitHub and is selling them for $50k on underground forums, with sample verification available. If no one buys, they may release the data for free later. Previously, GitHub officials confirmed they are investigating the issue of "unauthorized access to internal repositories," suspected to be caused by malicious VS Code/AI Coding plugins installed on GitHub employee devices.