5 ms·
Nx Console VS Code extension was the initial access vector in the GitHub breach
- vldszn 4mo agoPer security advisory on GitHub: Root Cause One of our developers was compromised by a recent supply-chain compromise on Tanstack, which leaked their GitHub credentials through the GitHub CLI (gh). This allowed the attacker to run workflows on our GitHub repository as a contributor. More links: https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w https://github.com/nrwl/nx-console/security/advisories/GHSA-... https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised https://www.stepsecurity.io/blog/nx-console-vs-code-extensio...