⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Summary: GitHub confirmed that a breach of its internal repositories came from an employee device compromised by a poisoned version of the Nx Console VS Code extension, allowing a cybercriminal group called TeamPCP to exfiltrate about 3,800 repositories. The Nx team said the extension, nrwl.angular-console, was breached after a developer's system was hacked following the TanStack supply chain attack, which also affected OpenAI, Mistral AI, and Grafana Labs, the last of which refused an extortion demand to release its codebase.
Key Takeaway: TeamPCP publicly released the Shai-Hulud code, giving attackers a ready-made blueprint for worms targeting open-source repositories and developer environments, and the downstream victims from this campaign are still emerging.

Read the original at The Hacker News ↗