Grafana says stolen GitHub token let hackers steal codebase By Bill Toulas May 18, 2026 09:46 AM Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token. …
… However, BleepingComputer could not confirm the authenticity of the data. …
… "We are investigating unauthorized access to GitHub's internal repositories," GitHub told BleepingComputer when asked for further details. …
… BleepingComputer contacted Microsoft about this additional zero-day and will update this story if we receive a response. …
… The attacker's current claims of ~3,800 repositories are directionally consistent with our investigation so far." This comes after GitHub told BleepingComputer on Tuesday evening that it was investigating claims of unauthorized access to its internal repositories and added that it has no evidence t… …
… The parallel to ransomware is the operational downtime window, not data loss," Dvash told BleepingComputer. …
… GitHub revealed the breach on Tuesday, saying it was investigating claims of unauthorized access to its internal repositories and telling BleepingComputer that the incident resulted from an employee installing a malicious Visual Studio Code VS Code extension, without disclosing the extension's name. …
… Checkmarx says that its GitHub repositories are isolated from its customer production environment, and no customer data is stored in the GitHub repository. …
… The jabs don't stop there, continuing on the BlueHammer GitHub page. …
… No sensitive customer data or credentials were involved or exposed," an Anthropic spokesperson told Bleepingcomputer . …
