{"id":251072,"date":"2026-05-21T00:27:00","date_gmt":"2026-05-21T04:27:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/21\/github-internal-repositories-breached-via-malicious-nx-console-vs-code-extension\/"},"modified":"2026-05-21T04:20:07","modified_gmt":"2026-05-21T08:20:07","slug":"github-internal-repositories-breached-via-malicious-nx-console-vs-code-extension","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/21\/github-internal-repositories-breached-via-malicious-nx-console-vs-code-extension\/","title":{"rendered":"GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension"},"content":{"rendered":"

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/05\/github-internal-repositories-breached.html<\/a><\/p>\n

Publish Date: 2026-05-21 00:27:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

\ue804Ravie Lakshmanan<\/span>\ue802May 21, 2026<\/span><\/span>Supply Chain Attack \/ Developer Tools<\/span><\/p>\n

GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned version of the Nx Console Microsoft Visual Studio Code (VS Code) extension.\u00a0<\/p>\n

The development comes as the Nx team revealed that the extension, nrwl.angular-console, was breached after one of its developers’ systems was hacked in the wake of the recent TanStack supply chain attack. Other companies that were impacted by the TanStack compromise include OpenAI, Mistral AI, and Grafana Labs.<\/p>\n

“We have no evidence of impact to customer information stored outside of GitHub’s internal repositories, such as our customer’s own enterprises, organizations, and repositories,” Alexis Wales, Chief Information Security Officer of GitHub, said in a statement.<\/p>\n

“Some of GitHub’s internal repositories contain information from customers, for example, excerpts of support interactions. If any impact is discovered, we will notify customers via established incident response and notification channels.”<\/p>\n

The attack is said to have allowed the threat actor, a cybercriminal group known as TeamPCP, to exfiltrate about 3,800 repositories. GitHub said it has taken steps to contain the incident and rotated critical secrets, adding it’s continuing to monitor the situation for follow-on activity.<\/p>\n

In a post on X, Jeff Cross, co-founder of Narwhal Technologies, the company behind nx.dev, said, “this incident highlights that there need to be deeper, more fundamental changes to how we and other maintainers need to think about securing developer tooling and open source distribution.”<\/p>\n

“We’re also beginning conversations with other high-profile open source maintainers about how we can work together on some of the deeper structural problems around software supply chain security. A lot of the assumptions the ecosystem has operated under for years no longer hold.”<\/p>\n

In…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension https:\/\/thehackernews.com\/2026\/05\/github-internal-repositories-breached.html Publish Date: 2026-05-21…<\/p>\n","protected":false},"author":1,"featured_media":251073,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjJ64wgVqZTQx208NgY0sBvUUQcR5mb-G4ENkfw4PEX9KlJJxEI_uUKQvPG0rReXB4chZ3wXrvNSR1QsrK525DDHkzY9X3nQYduh36qKTyC-k4EfixFeOU7YR1mRIw8ZJL-oYN8k_wwBid2GU8NYJtCqEFLOSzomuu-Xx7yA3Djim0nq79RyoZJs6HGga_H\/s1600\/github-hacked.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,30,34],"class_list":["post-251072","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-breach","tag-threat-actor"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/251072"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=251072"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/251072\/revisions"}],"predecessor-version":[{"id":251075,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/251072\/revisions\/251075"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/251073"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=251072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=251072"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=251072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}