Hackers Steal GitHub Tokens Through Malicious VS Code Extension That Remained Available for 18 Minutes

A poisoned version of the popular Nx Console extension for Visual Studio Code stayed on the official VS Code Marketplace for only about 18 minutes. That was long enough for some developers to install it and hand over their secrets. The theft led to one of the most serious developer-tool breaches of 2026. The extension […]

This article has been indexed from Cyber Security News