PROČITAJ VIŠE... https://decrypt.co/368476/github-confirms-3800-internal-repos-stolen-poisoned-vs-code-extension
TeamPCP gained access to GitHub's private source code after an employee unknowingly installed a malicious coding tool.