The absolute irony of GitHub getting breached because of a malicious VS Code extension
We spend millions on enterprise firewalls, complex network security architectures, multi-factor authentication, and rigorous zero-trust policies.
Only for 3,800 internal repositories to get exfiltrated because a single engineer just wanted a cool theme, an automated bracket-pair colorizer, or a random utility plugin from the marketplace.
It really proves that no matter how secure your cloud infrastructure is, the ultimate vulnerability will always be a developer looking for a productivity shortcut.