Frequency
4
occurrences
First Seen
May 19, 2026
Last Seen
July 8, 2026
Related Threat Clusters
-
GitHub Breach Linked to Compromised Nx Console Extension
On May 19, 2026, GitHub announced an investigation into unauthorized access to internal repositories after a malicious Visual Studio Code extension was executed on an employee's device. The attack, attributed to the…
5 articles · Updated July 7, 2026 -
Supply Chain Attack Targets Microsoft Entra ID via Compromised Nx Console Extension
On May 18, 2026, a compromised version of the Nx Console VS Code extension was uploaded to the Visual Studio Code Marketplace, targeting developer credentials and cloud infrastructure tokens. This attack exploited…
9 articles · Updated May 19, 2026 -
38% of GitHub Actions Workflows Vulnerable to Script Injection
Analysis shows that 38% of organizations using GitHub Actions workflows are exposed to script injection and unsafe trigger configurations. This vulnerability poses a significant risk in software supply chains, as GitHub…
2 articles · Updated June 4, 2026
Recent Intelligence Reports
- GitHub breach was likely caused by the Nx Console compromise — edge.prnewswire.com · July 8, 2026
- Link — edge.prnewswire.com · July 8, 2026
- Case For Github Actions Security — securitylabs.datadoghq.com · June 4, 2026
- Hackers Abuse Microsoft Entra ID Accounts to Exfiltrate Microsoft 365 and Azure Data — Cybersecuritynews · May 19, 2026