News

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

  • Kevin Poireault--Infosecurity Magazine
  • published date: 2026-05-21 14:45:00 UTC

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace

GitHub has confirmed that a recent breach into its internal repositories was caused by a vulnerability in a Microsoft Visual Studio Code (VS Code) extension called ‘Nx Console.’ The security team at… [+5469 chars]