Grafana says stolen GitHub token let hackers steal codebase By Bill Toulas May 18, 2026 09:46 AM Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token. …
… However, BleepingComputer could not confirm the authenticity of the data. …
… "We are investigating unauthorized access to GitHub's internal repositories," GitHub told BleepingComputer when asked for further details. …
… BleepingComputer contacted Microsoft about this additional zero-day and will update this story if we receive a response. …
… The attacker's current claims of ~3,800 repositories are directionally consistent with our investigation so far." This comes after GitHub told BleepingComputer on Tuesday evening that it was investigating claims of unauthorized access to its internal repositories and added that it has no evidence t… …
… The parallel to ransomware is the operational downtime window, not data loss," Dvash told BleepingComputer. …
… GitHub revealed the breach on Tuesday, saying it was investigating claims of unauthorized access to its internal repositories and telling BleepingComputer that the incident resulted from an employee installing a malicious Visual Studio Code VS Code extension, without disclosing the extension's name. …
… Checkmarx says that its GitHub repositories are isolated from its customer production environment, and no customer data is stored in the GitHub repository. …
… BleepingComputer has contacted Microsoft for a comment on Chaotic Eclipse’s latest exploit leaks, and a spokesperson stated that the company is committed to investigating reported security issues, "and update impacted devices to protect customers as soon as possible." "We also support coordinated v… …
… Download Now Related Articles: TeamPCP hackers advertise Mistral AI code repos for sale Official SAP npm packages compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Bitwarden CLI npm package compromised to steal developer credentials Trivy vulne… …