Nx Console VS Code extension was the initial access vector in the GitHub breach (opens in new tab)

(twitter.com)

3 pointsvldszn4d ago1 comments

1 comments

Per security advisory on GitHub:

Root Cause

One of our developers was compromised by a recent supply-chain compromise on Tanstack, which leaked their GitHub credentials through the GitHub CLI (gh). This allowed the attacker to run workflows on our GitHub repository as a contributor.

1 comments

vldsznOP4d ago

Per security advisory on GitHub:

Root Cause