GitHub Hacked? CZ Says Change Your Keys, You Idiots!

by

So, apparently, some genius at GitHub decided to download a “tainted” VS Code extension. You know, because who doesn’t love a little malware with their coding? Next thing you know, hackers are waltzing into GitHub’s internal repos like they own the place. Classic.

And now, some joker named “TeamPCP” is trying to sell 4,000 of GitHub’s private repos for a cool $50,000. Yeah, because nothing says “legit” like a cybercriminal forum. I mean, who doesn’t trust a guy with a name like TeamPCP? Probably the same guy who thought, “Hey, this random extension looks totally safe!”

GitHub’s Version of “Oops, My Bad”

GitHub finally fessed up on X (because where else would they admit to a breach?). They claim they deleted the malicious software “promptly.” Sure, after the hackers had a little sightseeing tour. And don’t worry, they say no customer data was touched. Yet. But hey, they’re rotating credentials! High-impact secrets first, of course. Because priorities.

Meanwhile, some French researcher found TeamPCP’s ad on a criminal message board. They’re not ransoming GitHub-just looking for one buyer. Classy. But GitHub and Microsoft haven’t confirmed anything, so take it with a grain of salt. Or a whole shaker. These guys love to exaggerate. It’s like they’re selling a used car: “Barely hacked, runs great!”

Crypto Folks Lose Their Minds (Again)

Binance’s CZ chimed in, telling crypto devs to change their API keys. Thanks, CZ. Real helpful. One guy called it “bad practice” to have API keys in repos. No kidding, Sherlock. But when you’ve got hundreds of keys, it’s not exactly a quick fix. Maybe we should just hire a key manager. Or a therapist.

One digital artist said the whole key storage system needs an update. Ya think? And some security guy pointed out that no one knows what permissions VS Code extensions have. Scary? Nah, it’s just another Tuesday in cybersecurity.

All this comes after a month of crypto hacks. Echo Protocol lost $76.7 million, THORChain got hit, and the Verus-Ethereum Bridge? Also toast. It’s like the Wild West out here, but with more zeroes and ones.

Vitalik Buterin thinks AI and formal verification can save us. Mathematically proving software behavior? Sounds great. But let’s start with not downloading sketchy extensions. Baby steps, people.

Read More

2026-05-21 00:31