GitHub이 침해되어, 공격자가 GitHub 내부 3800개 저장소에 접근함

GitHub's compromise through a malicious VS Code extension highlights a critical supply chain vulnerability, where a single compromised tool enabled attackers to access 3,800+ internal repositories despite limited privileges. This incident demonstrates how even read-only access across many repositories can pose severe risks when coupled with stolen credentials. Organizations must now reconsider their access control strategies, moving toward least-privilege and zero-trust models to prevent similar breaches.