Visual Studio Code

Visual Studio Code

Infrastructure, Security

One Click in github.dev Could Reach Every Repository the Developer Could.

GitHub and Visual Studio Code logos beside a github.dev notebook path reaching multiple private repositories

A malicious notebook could turn github.dev into a GitHub OAuth-token theft path with read and write access across the developer's repositories.

Rob Nidschelm
2 Jun 2026

Infrastructure, Security

One Poisoned Extension Reached 3,800 of GitHub’s Internal Repositories

Official Visual Studio Code and GitHub logos connected by an extension exfiltration path into repository storage

A compromised Nx Console update reached a GitHub employee device, stole credentials, and exposed roughly 3,800 internal repositories.

Rob Nidschelm
20 May 2026