How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

The Wild West of VS Code extensions and how a poisoned extension breached GitHub

calendar_today May 20, 2026 person domain aikido-security

A poisoned VS Code extension breached GitHub yesterday, one day after Nx Console (2.2M installs) was compromised for 18 minutes on the Visual Studio Marketplace and reached every user with auto-update on. Category: Vulnerabilities & Threats

open_in_new Read original post