Data breachcritical
GitHub Breach Traced to Malicious ‘Nx Console’ VS Code Extension
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-48027 | Malicious Code Embedded in Nx Console VS Code Extension 18.95.0 | 9.3 | 2% | KEVRansomwarePoC | KEV |
From the original article
4 min read at infosecurity-magazine.com
GitHub has confirmed that a recent breach into its internal repositories was caused by a vulnerability in a Microsoft Visual Studio Code (VS Code) extension called ‘Nx Console.’ The security team at the Microsoft-owed software developer platform warned on May 19 that an attacker gained unauthorized access to 3800 internal repositories via a “poisoned” VS Code extension found on an employee device.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.