GitHub hit by a compromised VSCode extension

A report from Reddit's NetSec community indicates that GitHub was impacted by a compromised Visual Studio Code (VSCode) extension. The information is based on a single external link with minimal technical details and no confirmed exploits or affected versions. No official vendor advisory or patch information is available. The severity is assessed as medium based on the report, but details on the nature or extent of the compromise are limited.

• xcancel.com/github/status/2056949168208552080 (opens in a new tab)
• reddit.com/r/netsec/comments/1tiiyxq/github_hit_by_a_compromised_vscode_extension/ (opens in a new tab)

• Rockstar Games has now been compromised several different ways since 2018, and none of them were a zero-dayAnalysis2026-10-06
• php2bitcoin x brotli2coin: live hacking streamNews2026-10-30
• Stopping Remote Code Execution with Sandboxes, CVE-2026-115995: Rust ZipMediumVulnerability2026-10-29
• XML Signature Wrapping authentication bypass in Moldova's MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077)MediumVulnerability2026-10-29
• New Kerberos Abuse Path Discovery - Constrained Delegation without Protocol Transition against SPN-less accountsNews2026-10-27