Skip to content
Threat Feed

Product

Visual Studio Code Marketplace

1 brief RSS
high threat

GitHub Breach Linked to TanStack npm Supply Chain Attack via Malicious VS Code Extension

GitHub experienced a breach affecting 3,800 internal repositories due to a supply chain attack targeting TanStack npm packages; the attacker compromised an employee's machine via a malicious version of the Nx Console VS Code extension and gained access to internal GitHub repositories by stealing credentials and secrets.

Nx Console +9 TeamPCP supply-chain vscode npm github credential-theft
2r 1t