GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

Infosecurity Magazine roundup highlights a major supply-chain and code‑integrity crisis: a malicious 'Nx Console' VS Code extension (published by an actor impersonating an Nx maintainer) has been linked to a breach of GitHub internal repositories (TeamPCP claim). Concurrent large-scale supply‑chain compromises include the Mini Shai‑Hulud campaign hitting AntV and TanStack npm packages (spreading to PyPI). The feed also covers multiple high‑impact vulnerabilities and malware campaigns — a nine‑year‑old Linux ptrace flaw leaking SSH keys and password hashes, the Fragnesia local privilege‑escal​​