Sometime in early 2025, an attacker slipped malicious code into a Visual Studio Code extension, and a GitHub employee ...
GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.