A poisoned VS Code extension breached GitHub yesterday, one day after Nx Console (2.2M installs) was compromised for 18 minutes on the Visual Studio Marketplace and reached every user with auto-update on. Category: Vulnerabilities & Threats
The Wild West of VS Code extensions and how a poisoned extension breached GitHub
calendar_today
May 20, 2026
domain
aikido-security