GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
// Forward-declare types from scoped_blocking_call.h to break cyclic dependency.