GitHub Internal Repository Leak via VS Code Extension

TL;DR

A supply chain attack on the Nx Console extension enabled attackers to steal credentials from a GitHub employee, leading to the theft of 4,000 private repositories. The incident exposes the risks of automated extension updates.