Skip to content

CVE-2026-25592

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
May 20, 2026
Last Seen
May 20, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group, resulted in the exfiltration of approximately 3,800 internal repositories. GitHub's...

Public Exploits

Checking GitHub for proof-of-concept code…