hn • r/hackernews
Comment on: GitHub confirms breach of 3,800 repos via malicious VSCode extension
The 3800 repos weren't exfiltrated from the compromised machine.The malware (be it a VSCode plugin, an npm package, or whatever is next) simply slurps up all of the users private keys/tokens/env-vars it can find and send