Malicious VS Code Extension Steals GitHub Tokens: What Developers Need to Know
A compromised VS Code extension turned a trusted developer tool into a security threat. The malicious Nx Console 18.95.0 release harvested GitHub tokens and other sensitive credentials, contributing to the exposure of approximately 3,800 internal GitHub repositories. Learn how the attack happened, who was affected, and how developers can protect their accounts.
Continue reading