GitHub says a poisoned VS Code extension exposed 3,800 internal repos as Binance founder CZ tells crypto devs to rotate keys.
Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.