Sometime in early 2025, an attacker slipped malicious code into a Visual Studio Code extension, and a GitHub employee ...
GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS ...
GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.
VS Code set a bar others haven't cleared.