GitHub says hackers stole about 3,800 internal repos after a poisoned VS Code extension hit an employee device ...