GitHub investigates internal repositories breach claimed by TeamPCP

GitHub is investigating a claim by the TeamPCP group that it accessed roughly 4,000 internal private repositories and is attempting to sell the stolen source code; GitHub says there is currently no evidence of impact to customer data outside its internal repos. The report notes TeamPCP's prior supply-chain compromises and deployment of 'TeamPCP Cloud Stealer' infostealer malware, underscoring potential supply-chain and data-exfiltration risks.