Tagged: GitHub Token Theft

May 20, 2026

Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens

The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection. The compromise specifically corrupted version 18.95.0, which was briefly propagated through the official Microsoft Visual Studio...

Malware

March 12, 2026

The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor

An imperceptible edit to a single tag transformed a ubiquitous security auditing instrument into a clandestine backdoor. A malefactor compromised the official Xygeni GitHub Action, implanting a fully functional remote command shell capable of...