GitHub Internal Data Stolen via Poisoned VS Code Plugin

This breach highlights the escalating risk of supply chain attacks targeting developer tools, where a single malicious plugin can compromise major tech infrastructure. It underscores the urgent need for organizations to secure internal developer environments with the same rigor as production systems.