build1 publisher
GitHub lost 3,800 internal repos to code running with its editor's permissions
A dev.to writeup traces roughly 3,800 exfiltrated GitHub repositories to one trojanised Nx Console install from the official Marketplace, where the sandbox that would have contained it has been an open feature request since 2018.
Publishers:dev.to
Reality
- Evidence42
- Adoption28
- Hype gap+18
- Incentives62
- Confidence45