Poisoned Nx Console extension stole GitHub tokens in 18 minutes
TeamPCP claims about 3,800 internal repositories from one GitHub employee; GitHub says customer repositories were not affected.
72
Product
Nx Console
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 10, 2026
- Last mentioned16h ago
Timeline
2 articles · newest firstTeamPCP stole about 3,800 GitHub repos via poisoned developer tools
GitHub says customer-owned repositories were not accessed, but some stolen internal repos held customer support excerpts.
78
Appears with
- LiteLLMproduct · 2
- Blackfogorganization · 2
- Aqua Securityvendor · 2
- TeamPCPthreat actor · 2
- Checkmarx KICSproduct · 2
- Trivyproduct · 2
- Nxvendor · 1
- FBIorganization · 1
- US Department of Justiceorganization · 1
- Aqua Securityvictim · 1
- GitHub Enterprise Serverproduct · 1
- Vectthreat actor · 1
- GitHubvictim · 1
- setup-trivyproduct · 1
- GitHubvendor · 1
- GitHuborganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.