A poisoned VS Code extension led to a GitHub breach, and Microsoft owns every link in the chain
…in the same May 11 TanStack attack, that some credential material was exposed, and that signing keys for Windows, macOS, iOS, and Android were impacted, prompting it to re-sign its apps…