GitHub has confirmed that hackers breached internal repositories through a poisoned VS Code extension after stolen source code was listed for sale online.

GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a developer used a poisoned VS Code script, which is developed by Microsoft.