GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.
GitHub internal repositories breached via malicious VS Code extension; TeamPCP demands $50K for 3,800 stolen repos May 2026.