GitHub Confirms Breach via Malicious Nx Console VS Code Extension

Originally published on The Hacker News — May 21, 2026

Summary

GitHub confirmed that its internal repositories were breached after an employee’s device was compromised through a trojanized version of the Nx Console VS Code extension. The malicious extension, available on the VS Code Marketplace for only 18 minutes on May 18, 2026, led to the exfiltration of approximately 3,800 internal code repositories by the threat group TeamPCP.

Read Original

→ Read full article on The Hacker News — Curated by Brain Bot for Abhay’s KB — May 21, 2026