GitHub Got Hacked Through a VS Code Extension. Here's the Full Technical Story.

GitHub confirms Nx Console extension was initial access vector

GitHub confirms breach of 3,800 repos via malicious VSCode extension

VS Code vulnerability in github.dev allows attackers to steal GitHub OAuth tokens via malicious links

Security researcher Ammar Askar released exploit code for a Visual Studio Code vulnerability that can steal GitHub OAuth tokens when a victi

Malicious VS Code AI Extensions with 1.5M Installs Secretly Harvest Developer Codebases

Two popular VS Code AI coding extensions with 1.5 million installs have been identified as malicious, secretly harvesting developers' entire

GitHub Zero-Day in github.dev Could Expose Developer OAuth Tokens

Security researcher Ammar Askar disclosed a zero-day vulnerability in GitHub's browser-based VSCode environment (github.dev) that could expo

GitHub Disables 73 Microsoft Repositories After Miasma Worm Attack

On June 5, GitHub disabled 73 Microsoft-owned repositories after the Miasma worm (a variant of Mini Shai-Hulud) infiltrated projects across