A poisoned VS Code extension led to a GitHub breach, and Microsoft owns every link in the chain
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
A trojanized version of the Nx Console VS Code extension (2.2M installs) was published to the Visual Studio Marketplace in May 2026, remaining live for just 18 minutes before takedown. In that window, VS Code's auto-update mechanism silently distributed the malicious build, which stole credentials from a GitHub employee's machine and enabled cloning of roughly 3,800 internal GitHub repositories. The attack exploited a chain of weaknesses all owned by Microsoft: the npm ecosystem (under GitHub), the VS Code Marketplace, VS Code's auto-updater, and GitHub itself. The poisoned extension was part of a broader campaign by TeamPCP (UNC6780), which also hit TanStack, OpenAI, Grafana Labs, Trivy, and LiteLLM. Structural issues highlighted include: no extension sandboxing, silent auto-updates with no delay option, token-based publishing with no second factor, and trust signals (verified badge, high install count) that actually amplify attacker reach. Microsoft's scanning and vetting processes are acknowledged as insufficient, with key protections still on the roadmap.
