How a 18-Minute VS Code Extension Breach Hit GitHub and OpenAI

A poisoned VS Code extension led to a supply chain attack compromising GitHub, OpenAI, and Mistral AI in under 20 minutes. Here’s what you need to know.