{"id":183005,"date":"2026-05-25T09:21:23","date_gmt":"2026-05-25T09:21:23","guid":{"rendered":"https:\/\/www.datatip.eu\/?p=183005"},"modified":"2026-09-19T06:39:29","modified_gmt":"2026-09-19T06:39:29","slug":"vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra","status":"publish","type":"post","link":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/","title":{"rendered":"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra"},"content":{"rendered":"<p class=\"article-byline\" style=\"color:inherit;opacity:0.7;font-size:0.9em;margin-bottom:1.25em;\">Szerz\u0151: DataTip \u00b7 Megjelent: <time datetime=\"2026-05-25T09:21:23\">2026. m\u00e1jus 25.<\/time><\/p>\n<div class=\"article-summary\" style=\"border-left:3px solid rgba(127,127,127,0.4);background:rgba(127,127,127,0.1);color:inherit;padding:1em 1.25em;margin-bottom:1.5em;border-radius:6px;line-height:1.6\">\n<p style=\"margin:0;\"><strong>R\u00f6viden:<\/strong> A legitim Nx Console VS Code-b\u0151v\u00edtm\u00e9ny kompromitt\u00e1l\u00f3d\u00e1sa megmutatja, hogy a fejleszt\u0151i eszk\u00f6z\u00f6k nagy \u00e9rt\u00e9k\u0171 t\u00e1mad\u00e1si fel\u00fcletet jelenthetnek, nem csak az \u00e9les infrastrukt\u00fara vagy a f\u00fcgg\u0151s\u00e9gek. A cikk javasolja az automatikus friss\u00edt\u00e9sek kikapcsol\u00e1s\u00e1t, a b\u0151v\u00edtm\u00e9nyek pontos verzi\u00f3inak r\u00f6gz\u00edt\u00e9s\u00e9t, a jogosults\u00e1gok audit\u00e1l\u00e1s\u00e1t, a viselked\u00e9s monitoroz\u00e1s\u00e1t, vissza\u00e1ll\u00edt\u00e1si tervek fenntart\u00e1s\u00e1t, valamint gondosan v\u00e1logatott priv\u00e1t marketplace-ek m\u00e9rlegel\u00e9s\u00e9t. A csapatoknak lelt\u00e1rba kell venni\u00fck a b\u0151v\u00edtm\u00e9nyeket, \u00e9s j\u00f3v\u00e1hagy\u00e1si, valamint reag\u00e1l\u00e1si szab\u00e1lyokat kell kialak\u00edtaniuk a teljes eszk\u00f6zl\u00e1ncukra.<\/p>\n<ul style=\"margin:0.6em 0 0;padding-left:1.25em;\">\n<li style=\"margin:0.25em 0;\">A rosszindulat\u00fa Nx Console 18.95.0-s verzi\u00f3t a legitim b\u0151v\u00edtm\u00e9ny oldal\u00e1ra t\u00f6lt\u00f6tt\u00e9k fel, \u00e9s 11\u201318 percig volt el\u00e9rhet\u0151.<\/li>\n<li style=\"margin:0.25em 0;\">A cikk javasolja a VS Code automatikus b\u0151v\u00edtm\u00e9nyfriss\u00edt\u00e9seinek kikapcsol\u00e1s\u00e1t \u00e9s a pontos verzi\u00f3k r\u00f6gz\u00edt\u00e9s\u00e9t a csapatkonfigur\u00e1ci\u00f3ban.<\/li>\n<li style=\"margin:0.25em 0;\">A csapatoknak lelt\u00e1rba kell venni\u00fck a b\u0151v\u00edtm\u00e9nyeket, \u00e1t kell tekinteni\u00fck a jogosults\u00e1gokat, monitorozniuk kell a viselked\u00e9st, \u00e9s vissza\u00e1ll\u00edt\u00e1si tervet kell fenntartaniuk a kompromitt\u00e1lt verzi\u00f3kra.<\/li>\n<li style=\"margin:0.25em 0;\">Az olyan fejleszt\u0151i eszk\u00f6z\u00f6ket, mint a szerkeszt\u0151k, termin\u00e1lok, Git-kliensek \u00e9s CI\/CD runnerek, potenci\u00e1lis t\u00e1mad\u00e1si vektork\u00e9nt kell kezelni.<\/li>\n<li style=\"margin:0.25em 0;\">A priv\u00e1t marketplace-ek vagy v\u00e1logatott registryk er\u0151sebb kontrollt biztos\u00edthatnak, b\u00e1r \u00fczemeltet\u00e9si t\u00f6bbletterhet jelentenek, \u00e9s nem felt\u00e9tlen\u00fcl illenek kis csapatokhoz.<\/li>\n<\/ul>\n<\/div>\n<p><!-- datatip-blog-upgrade:2026-07-06:start --><\/p>\n<section class=\"datatip-blog-upgrade datatip-blog-upgrade-opening\">\n<p><strong>Az incidens az\u00e9rt fontos, mert a t\u00e1mad\u00e1s nem az \u00e9les infrastrukt\u00far\u00e1ban kezd\u0151d\u00f6tt. Egy megb\u00edzhat\u00f3 fejleszt\u0151i eszk\u00f6zben indult, amely a napi munkafolyamat r\u00e9sze.<\/strong><\/p>\n<ul style=\"clear:both;\">\n<li>Bels\u0151 dokument\u00e1ci\u00f3 \u00e9s hibak\u00f6vet\u00e9s, amely biztons\u00e1gi s\u00e9r\u00fcl\u00e9kenys\u00e9geket fedhet fel.<br \/>\nAz incidens teljes kiterjed\u00e9s\u00e9t m\u00e9g vizsg\u00e1lj\u00e1k, de a lehets\u00e9ges hat\u00e1s jelent\u0151s. Ez\u00e9rt fontos ez az eset a GitHubon t\u00fal is.<\/li>\n<\/ul>\n<h2 id=\"response-and-mitigation-steps\" style=\"clear:both;\">Reag\u00e1l\u00e1si \u00e9s k\u00e1rm\u00e9rs\u00e9kl\u00e9si l\u00e9p\u00e9sek<\/h2>\n<p>A GitHub a 11\u201318 perces id\u0151ablakon bel\u00fcl elt\u00e1vol\u00edtotta a rosszindulat\u00fa b\u0151v\u00edtm\u00e9nyt a Visual Studio Marketplace-r\u0151l. Az\u00f3ta lecser\u00e9lt\u00e9k a bels\u0151 hiteles\u00edt\u0151 adatokat, \u00e1tn\u00e9zt\u00e9k a hozz\u00e1f\u00e9r\u00e9si napl\u00f3kat, \u00e9s bels\u0151 vizsg\u00e1latot ind\u00edtottak. Az Nx csapata is nyilatkozatot adott ki, amelyben meger\u0151s\u00edtette, hogy a legitim b\u0151v\u00edtm\u00e9ny kompromitt\u00e1l\u00f3dott, \u00e9s hogy a felhaszn\u00e1l\u00f3knak a leg\u00fajabb biztons\u00e1gos verzi\u00f3ra kell friss\u00edteni\u00fck.<br \/>\nA t\u00f6bbieknek a reakci\u00f3nak enn\u00e9l tov\u00e1bb kell mennie. Ezt javasoljuk:<\/p>\n<ul style=\"clear:both;\">\n<li><strong>Kapcsolja ki az automatikus b\u0151v\u00edtm\u00e9nyfriss\u00edt\u00e9seket<\/strong> a VS Code-ban. Ez a leghat\u00e9konyabb v\u00e1ltoztat\u00e1s, amelyet m\u00e9g ma megtehet. A friss\u00edt\u00e9sek manu\u00e1lis \u00e1ttekint\u00e9se lehet\u0151s\u00e9get ad arra, hogy \u00e9szrevegye a gyan\u00fas verzi\u00f3v\u00e1lt\u00e1sokat, vagy friss\u00edt\u00e9s el\u0151tt \u00e1tn\u00e9zze a kiad\u00e1si megjegyz\u00e9seket.<\/li>\n<li><strong>R\u00f6gz\u00edtse a b\u0151v\u00edtm\u00e9nyek verzi\u00f3it<\/strong> a csapat konfigur\u00e1ci\u00f3s f\u00e1jljaiban. A <code>.vscode<\/code> k\u00f6nyvt\u00e1rban tal\u00e1lhat\u00f3 <code>extensions.json<\/code> aj\u00e1nl\u00e1sf\u00e1jlban adjon meg pontos verzi\u00f3kat, ne csak b\u0151v\u00edtm\u00e9nyazonos\u00edt\u00f3kat.<\/li>\n<li><strong>Audit\u00e1lja a b\u0151v\u00edtm\u00e9nyek jogosults\u00e1gait<\/strong>. A VS Code-b\u0151v\u00edtm\u00e9nyek olyan k\u00e9pess\u00e9geket k\u00e9rhetnek, mint a h\u00e1l\u00f3zati hozz\u00e1f\u00e9r\u00e9s, a f\u00e1jlrendszer-hozz\u00e1f\u00e9r\u00e9s \u00e9s a parancsv\u00e9grehajt\u00e1s. N\u00e9zze \u00e1t, mire van t\u00e9nylegesen sz\u00fcks\u00e9ge az egyes haszn\u00e1lt b\u0151v\u00edtm\u00e9nyeknek.<\/li>\n<li><strong>Monitorozza a b\u0151v\u00edtm\u00e9nyek viselked\u00e9s\u00e9t<\/strong>. Az olyan eszk\u00f6z\u00f6k, mint a VS Code be\u00e9p\u00edtett extension host napl\u00f3z\u00e1sa, seg\u00edthetnek \u00e9szrevenni a v\u00e1ratlan aktivit\u00e1st.<br \/>\n<strong>Mikor ne alkalmazza ezeket a l\u00e9p\u00e9seket<\/strong>: Ha csapata gyors biztons\u00e1gi jav\u00edt\u00e1sokra t\u00e1maszkodik, \u00e9s nem engedhet meg semmilyen k\u00e9s\u00e9st a friss\u00edt\u00e9sek fogad\u00e1s\u00e1ban, m\u00e9rlegelnie kell a k\u00e9sleltetett friss\u00edt\u00e9s kock\u00e1zat\u00e1t egy megm\u00e9rgezett b\u0151v\u00edtm\u00e9ny kock\u00e1zat\u00e1val szemben. Ebben az esetben fontolja meg egy priv\u00e1t b\u0151v\u00edtm\u00e9ny-marketplace vagy egy v\u00e1logatott b\u0151v\u00edtm\u00e9nyregistry haszn\u00e1lat\u00e1t, ahol \u00d6n szab\u00e1lyozza a friss\u00edt\u00e9sek \u00fctem\u00e9t.<\/li>\n<\/ul>\n<h3 id=\"a-practical-audit-checklist-for-your-team\" style=\"clear:both;\">Gyakorlati audit-ellen\u0151rz\u0151lista a csapata sz\u00e1m\u00e1ra<\/h3>\n<p>\u00cdme egy konkr\u00e9t l\u00e9p\u00e9ssor, amelyet m\u00e9g ezen a h\u00e9ten megtehet:<\/p>\n<ol style=\"clear:both;\">\n<li><strong>Vegye lelt\u00e1rba az \u00f6sszes VS Code-b\u0151v\u00edtm\u00e9nyt<\/strong>, amelyet a csapata haszn\u00e1l. Export\u00e1lja a list\u00e1t minden fejleszt\u0151 g\u00e9p\u00e9r\u0151l, \u00e9s vesse \u00f6ssze egy ismert, megb\u00edzhat\u00f3 alap\u00e1llapottal.<\/li>\n<li><strong>Tekintse \u00e1t a b\u0151v\u00edtm\u00e9nyek jogosults\u00e1gait<\/strong> a lelt\u00e1r minden b\u0151v\u00edtm\u00e9ny\u00e9n\u00e9l. Keressen olyan b\u0151v\u00edtm\u00e9nyeket, amelyek egy\u00e9rtelm\u0171 ok n\u00e9lk\u00fcl k\u00e9rnek h\u00e1l\u00f3zati vagy f\u00e1jlrendszer-hozz\u00e1f\u00e9r\u00e9st.<\/li>\n<li><strong>\u00c1ll\u00edtsa be a b\u0151v\u00edtm\u00e9nyverzi\u00f3k r\u00f6gz\u00edt\u00e9s\u00e9t<\/strong> a csapat <code>.vscode\/extensions.json<\/code> f\u00e1jlj\u00e1ban. Pontos verzi\u00f3kat haszn\u00e1ljon, ne tartom\u00e1nyokat.<\/li>\n<li><strong>Kapcsolja ki az automatikus friss\u00edt\u00e9seket<\/strong> a VS Code be\u00e1ll\u00edt\u00e1saiban: <code>&quot;extensions.autoUpdate&quot;: false<\/code>.<\/li>\n<li><strong>K\u00e9sz\u00edtsen vissza\u00e1ll\u00edt\u00e1si tervet<\/strong> a kompromitt\u00e1lt b\u0151v\u00edtm\u00e9nyekre. Tudja, mely verzi\u00f3k biztons\u00e1gosak, \u00e9s hogyan \u00e1llhat vissza gyorsan.<\/li>\n<\/ol>\n<h2 id=\"why-this-matters-for-your-entire-toolchain\" style=\"clear:both;\">Mi\u00e9rt fontos ez a teljes eszk\u00f6zl\u00e1nca szempontj\u00e1b\u00f3l?<\/h2>\n<p>Ez az incidens nem elszigetelt eset. Jelz\u00e9s arra, hogy a t\u00e1mad\u00f3k a f\u00fcgg\u0151s\u00e9gekt\u0151l felfel\u00e9 haladnak a fejleszt\u0151i eszk\u00f6z\u00f6k fel\u00e9. A szerkeszt\u0151je, a termin\u00e1lemul\u00e1tora, a Git-kliense, a CI\/CD runnere \u2013 minden eszk\u00f6z, amellyel k\u00f3dot \u00edr \u00e9s sz\u00e1ll\u00edt, potenci\u00e1lis t\u00e1mad\u00e1si vektor.<br \/>\nKor\u00e1bban m\u00e1r \u00edrtunk <a href=\"\/the-accidental-ddos-threatening-your-product-velocity\/\">a term\u00e9kfejleszt\u00e9si sebess\u00e9get fenyeget\u0151 \u201ev\u00e9letlen DDoS\u201d<\/a> kock\u00e1zatair\u00f3l, \u00e9s arr\u00f3l, mi\u00e9rt fontosabb, mint valaha, a gondolkod\u00e1sk\u00f6zpont\u00fa m\u00e9rn\u00f6ki munka az automatiz\u00e1lt eszk\u00f6zl\u00e1ncok kor\u00e1ban. Ez a t\u00e1mad\u00e1s konkr\u00e9t p\u00e9lda arra, mi\u00e9rt <a href=\"\/code-is-a-liability-why-we-prioritize-thinking-first-engineering\/\">helyezz\u00fck el\u0151t\u00e9rbe a gondolkod\u00e1sk\u00f6zpont\u00fa m\u00e9rn\u00f6ki munk\u00e1t<\/a> a haszn\u00e1lt eszk\u00f6z\u00f6kbe vetett vak bizalommal szemben.<br \/>\nA t\u00e1mad\u00e1si id\u0151ablak \u2013 <strong>11\u201318 perc<\/strong> \u2013 szint\u00e9n tanuls\u00e1gos. A t\u00e1mad\u00f3knak nincs sz\u00fcks\u00e9g\u00fck napokra vagy hetekre. Percek is elegend\u0151k. Egy megm\u00e9rgezett b\u0151v\u00edtm\u00e9nyt le lehet t\u00f6lteni, telep\u00edteni \u00e9s futtatni, miel\u0151tt b\u00e1rki \u00e9szrevenn\u00e9, hogy megv\u00e1ltozott a verzi\u00f3sz\u00e1m. Mire a b\u0151v\u00edtm\u00e9nyt elt\u00e1vol\u00edtj\u00e1k a marketplace-r\u0151l, a k\u00e1r m\u00e1r megt\u00f6rt\u00e9nt.<\/p>\n<h3 id=\"the-broader-trend-ide-extensions-as-attack-vectors\" style=\"clear:both;\">A t\u00e1gabb trend: IDE-b\u0151v\u00edtm\u00e9nyek mint t\u00e1mad\u00e1si vektorok<\/h3>\n<p>Nem ez az els\u0151 eset, hogy egy VS Code-b\u0151v\u00edtm\u00e9nyt fegyverk\u00e9nt haszn\u00e1ltak, \u00e9s nem is az utols\u00f3. L\u00e1ttunk m\u00e1r:<\/p>\n<ul style=\"clear:both;\">\n<li>Kriptovaluta-t\u00e1rc\u00e1k kulcsait ellop\u00f3 rosszindulat\u00fa b\u0151v\u00edtm\u00e9nyeket.<\/li>\n<li>K\u00f6rnyezeti v\u00e1ltoz\u00f3kat \u00e9s API-tokeneket kisziv\u00e1rogtat\u00f3 b\u0151v\u00edtm\u00e9nyeket.<\/li>\n<li>Hirdet\u00e9seket beinjekt\u00e1l\u00f3 vagy forgalmat \u00e1tir\u00e1ny\u00edt\u00f3 b\u0151v\u00edtm\u00e9nyeket.<\/li>\n<li>Tart\u00f3s hozz\u00e1f\u00e9r\u00e9shez h\u00e1ts\u00f3 kaput telep\u00edt\u0151 b\u0151v\u00edtm\u00e9nyeket.<br \/>\nEzt az incidenst a c\u00e9lpont \u00e9s a kifinomults\u00e1g teszi k\u00fcl\u00f6nlegess\u00e9. A t\u00e1mad\u00f3 kifejezetten a GitHub bels\u0151 repositoryjait vette c\u00e9lba, nem v\u00e9letlenszer\u0171 fejleszt\u0151i g\u00e9peket. Ez c\u00e9lzott t\u00e1mad\u00e1sra utal, nem vakt\u00e1ban v\u00e9grehajtott, t\u00f6meges akci\u00f3ra.<\/li>\n<\/ul>\n<h2 id=\"what-this-means-for-your-team\" style=\"clear:both;\">Mit jelent ez a csapata sz\u00e1m\u00e1ra?<\/h2>\n<p>Ha fejleszt\u0151csapatot vezet, ennek az incidensnek arra kell k\u00e9sztetnie, hogy fel\u00fclvizsg\u00e1lja az eszk\u00f6zl\u00e1nc biztons\u00e1gi szab\u00e1lyzatait. Ezeket a k\u00e9rd\u00e9seket \u00e9rdemes feltennie:<\/p>\n<ul style=\"clear:both;\">\n<li>Van szab\u00e1lyzatuk a VS Code-b\u0151v\u00edtm\u00e9nyek j\u00f3v\u00e1hagy\u00e1s\u00e1ra?<\/li>\n<li>\u00c1tn\u00e9zik a b\u0151v\u00edtm\u00e9nyfriss\u00edt\u00e9seket, miel\u0151tt azok a csapathoz ker\u00fclnek?<\/li>\n<li>\u00c9szre tudj\u00e1k venni, ha egy fejleszt\u0151i eszk\u00f6z v\u00e1ratlanul kezd viselkedni?<\/li>\n<li>Van vissza\u00e1ll\u00edt\u00e1si terv\u00fck egy kompromitt\u00e1lt b\u0151v\u00edtm\u00e9nyre?<\/li>\n<li>Monitorozz\u00e1k a b\u0151v\u00edtm\u00e9nyek jogosults\u00e1gait a teljes csapatban?<\/li>\n<li>Van m\u00f3djuk kik\u00e9nyszer\u00edteni a b\u0151v\u00edtm\u00e9nyverzi\u00f3k r\u00f6gz\u00edt\u00e9s\u00e9t minden fejleszt\u0151i g\u00e9pen?<br \/>\nA legt\u00f6bb csapat legal\u00e1bb h\u00e1rom k\u00e9rd\u00e9sre nemmel felel. Ezen v\u00e1ltoztatni kell.<br \/>\nAz egy\u00e9ni fejleszt\u0151k sz\u00e1m\u00e1ra a tanuls\u00e1g egyszer\u0171bb: minden b\u0151v\u00edtm\u00e9nyt kezeljenek potenci\u00e1lis t\u00e1mad\u00e1si vektork\u00e9nt. N\u00e9zz\u00e9k \u00e1t a jogosults\u00e1gokat. R\u00f6gz\u00edts\u00e9k a verzi\u00f3kat. Ne b\u00edzzanak az automatikus friss\u00edt\u00e9sekben.<\/li>\n<\/ul>\n<h3 id=\"the-role-of-private-extension-marketplaces\" style=\"clear:both;\">A priv\u00e1t b\u0151v\u00edtm\u00e9ny-marketplace-ek szerepe<\/h3>\n<p>Azoknak a csapatoknak, amelyeknek szorosabb kontrollra van sz\u00fcks\u00e9g\u00fck, \u00e9rdemes megfontolniuk a priv\u00e1t b\u0151v\u00edtm\u00e9ny-marketplace-eket. Az olyan eszk\u00f6z\u00f6kkel, mint az Open VSX vagy a saj\u00e1t \u00fczemeltet\u00e9s\u0171 b\u0151v\u00edtm\u00e9nyregistryk, v\u00e1logathatja, mely b\u0151v\u00edtm\u00e9nyek \u00e9rhet\u0151k el a csapata sz\u00e1m\u00e1ra, \u00e9s szab\u00e1lyozhatja a friss\u00edt\u00e9sek \u00fctem\u00e9t. Ez \u00fczemeltet\u00e9si t\u00f6bbletterhet jelent, de olyan biztons\u00e1gi hat\u00e1rt ad, amelyet a nyilv\u00e1nos marketplace nem tud biztos\u00edtani.<br \/>\n<strong>Mikor ne haszn\u00e1ljon priv\u00e1t marketplace-t<\/strong>: Ha a csapata kicsi (10 fejleszt\u0151 alatti), vagy sokf\u00e9le speci\u00e1lis b\u0151v\u00edtm\u00e9nyt haszn\u00e1l, egy priv\u00e1t registry fenntart\u00e1s\u00e1nak terhe meghaladhatja az el\u0151ny\u00f6ket. Ebben az esetben ink\u00e1bb a verzi\u00f3r\u00f6gz\u00edt\u00e9sre \u00e9s a friss\u00edt\u00e9sek manu\u00e1lis \u00e1ttekint\u00e9s\u00e9re \u00f6sszpontos\u00edtson.<\/p>\n<figure class=\"datatip-blog-upgrade-image\" data-datatip-blog-image=\"159700\"><img width=\"1672\" height=\"941\" src=\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline.jpg\" alt=\"S\u00f6t\u00e9t, szerkeszt\u0151s\u00e9gi st\u00edlus\u00fa DataTip illusztr\u00e1ci\u00f3 a k\u00f6vetkez\u0151h\u00f6z: Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra.\" class=\"wp-image-180792\" loading=\"lazy\" decoding=\"async\" srcset=\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline.jpg 1672w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-300x169.jpg 300w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-1024x576.jpg 1024w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-768x432.jpg 768w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-1536x864.jpg 1536w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-350x197.jpg 350w\" sizes=\"auto, (max-width: 1672px) 100vw, 1672px\" \/><\/figure>\n<h2 id=\"key-takeaways\" style=\"clear:both;\">A legfontosabb tanuls\u00e1gok<\/h2>\n<ul style=\"clear:both;\">\n<li>Egy rosszindulat\u00fa Nx Console VS Code-b\u0151v\u00edtm\u00e9ny (v18.95.0) 2026. m\u00e1jus 18-\u00e1n 11\u201318 percig volt el\u00e9rhet\u0151 a Visual Studio Marketplace-en, \u00e9s behatolt a GitHub bels\u0151 repositoryjaiba.<\/li>\n<li>A t\u00e1mad\u00e1si vektor egy megb\u00edzhat\u00f3 fejleszt\u0151i eszk\u00f6z volt, nem egy f\u00fcgg\u0151s\u00e9g vagy h\u00e1l\u00f3zati s\u00e9r\u00fcl\u00e9kenys\u00e9g.<\/li>\n<li>Kapcsolja ki az automatikus b\u0151v\u00edtm\u00e9nyfriss\u00edt\u00e9seket, \u00e9s r\u00f6gz\u00edtse a b\u0151v\u00edtm\u00e9nyek verzi\u00f3it, hogy cs\u00f6kkentse a hasonl\u00f3 t\u00e1mad\u00e1soknak val\u00f3 kitetts\u00e9g\u00e9t.<\/li>\n<li>Ez az incidens meger\u0151s\u00edti, hogy a fejleszt\u0151i eszk\u00f6z\u00f6k akt\u00edv \u00e9s nagy \u00e9rt\u00e9k\u0171 t\u00e1mad\u00e1si fel\u00fcletet jelentenek.<\/li>\n<li>Egy gyakorlati audit-ellen\u0151rz\u0151lista seg\u00edthet a csapat\u00e1nak m\u00e9g ezen a h\u00e9ten felm\u00e9rni \u00e9s m\u00e9rs\u00e9kelni ezt a kock\u00e1zatot.<\/li>\n<\/ul>\n<h2 id=\"frequently-asked-questions\" style=\"clear:both;\">Gyakran ism\u00e9telt k\u00e9rd\u00e9sek<\/h2>\n<h3 id=\"was-the-nx-console-extension-itself-compromised-or-was-it-a-fake-upload\" style=\"clear:both;\">Maga az Nx Console b\u0151v\u00edtm\u00e9ny kompromitt\u00e1l\u00f3dott, vagy hamis felt\u00f6lt\u00e9sr\u0151l volt sz\u00f3?<\/h3>\n<p>Az Nx csapata meger\u0151s\u00edtette, hogy a legitim Nx Console b\u0151v\u00edtm\u00e9ny kompromitt\u00e1l\u00f3dott. A rosszindulat\u00fa 18.95.0-s verzi\u00f3t a legitim b\u0151v\u00edtm\u00e9ny Visual Studio Marketplace-oldal\u00e1ra t\u00f6lt\u00f6tt\u00e9k fel. Nem typosquatting-t\u00e1mad\u00e1sr\u00f3l vagy hamis b\u0151v\u00edtm\u00e9nyr\u0151l volt sz\u00f3 \u2013 hanem a hivatalos build- \u00e9s kiad\u00e1si pipeline k\u00f6zvetlen kompromitt\u00e1l\u00e1s\u00e1r\u00f3l.<\/p>\n<h3 id=\"how-can-i-check-if-i-downloaded-the-malicious-version\" style=\"clear:both;\">Hogyan ellen\u0151rizhetem, hogy let\u00f6lt\u00f6ttem-e a rosszindulat\u00fa verzi\u00f3t?<\/h3>\n<p>Ellen\u0151rizze a VS Code-b\u0151v\u00edtm\u00e9nyei verzi\u00f3it. Ha az Nx Console 18.95.0-s verzi\u00f3ja van telep\u00edtve, \u00e9rintett lehet. Azonnal friss\u00edtsen a leg\u00fajabb biztons\u00e1gos verzi\u00f3ra, \u00e9s n\u00e9zze \u00e1t a GitHub hozz\u00e1f\u00e9r\u00e9si napl\u00f3it, valamint a helyi k\u00f6rnyezet\u00e9t a kompromitt\u00e1l\u00f3d\u00e1s jelei ut\u00e1n kutatva.<\/p>\n<h3 id=\"should-i-stop-using-vs-code-extensions-entirely\" style=\"clear:both;\">Teljesen fel kell hagynom a VS Code-b\u0151v\u00edtm\u00e9nyek haszn\u00e1lat\u00e1val?<\/h3>\n<p>Nem. A megold\u00e1s nem a fejleszt\u0151i eszk\u00f6z\u00f6k elhagy\u00e1sa, hanem az, hogy ugyanolyan szigorral kezelje \u0151ket, mint az \u00e9les f\u00fcgg\u0151s\u00e9geket. R\u00f6gz\u00edtse a verzi\u00f3kat, tekintse \u00e1t a friss\u00edt\u00e9seket, \u00e9s audit\u00e1lja a jogosults\u00e1gokat. A kock\u00e1zat val\u00f3s, de a megfelel\u0151 gyakorlatokkal kezelhet\u0151.<\/p>\n<h3 id=\"how-long-was-the-malicious-extension-available\" style=\"clear:both;\">Mennyi ideig volt el\u00e9rhet\u0151 a rosszindulat\u00fa b\u0151v\u00edtm\u00e9ny?<\/h3>\n<p>A rosszindulat\u00fa 18.95.0-s verzi\u00f3 2026. m\u00e1jus 18-\u00e1n 11\u201318 percig volt el\u00e9rhet\u0151 a Visual Studio Marketplace-en. B\u00e1r ez r\u00f6vid id\u0151ablak, az automatiz\u00e1lt t\u00e1mad\u00e1sok hat\u00e9konyan kihaszn\u00e1lhatj\u00e1k.<\/p>\n<h3 id=\"what-should-i-do-if-i-suspect-my-machine-was-compromised\" style=\"clear:both;\">Mit tegyek, ha azt gyan\u00edtom, hogy a g\u00e9pem kompromitt\u00e1l\u00f3dott?<\/h3>\n<p>Cser\u00e9lje le az \u00e9rintett g\u00e9pen t\u00e1rolt \u00f6sszes hiteles\u00edt\u0151 adatot, n\u00e9zze \u00e1t GitHub- \u00e9s m\u00e1s felh\u0151fi\u00f3kjai hozz\u00e1f\u00e9r\u00e9si napl\u00f3it, futtasson biztons\u00e1gi vizsg\u00e1latot, \u00e9s fontolja meg a fejleszt\u0151i k\u00f6rnyezet tiszta \u00fajratelep\u00edt\u00e9s\u00e9t. Ha van biztons\u00e1gi csapata, vegye fel vel\u00fck a kapcsolatot.<\/p>\n<h2 id=\"closing\" style=\"clear:both;\">Z\u00e1rsz\u00f3<\/h2>\n<p>Ez a t\u00e1mad\u00e1s eml\u00e9keztet arra, hogy a biztons\u00e1g nem olyasmi, amit ut\u00f3lag csavar hozz\u00e1 a rendszerhez. Minden olyan d\u00f6nt\u00e9s tulajdons\u00e1ga, amelyet a fejleszt\u0151i k\u00f6rnyezet\u00e9vel kapcsolatban hoz. A rosszindulat\u00fa Nx Console b\u0151v\u00edtm\u00e9ny 11\u201318 percig volt el\u00e9rhet\u0151. Csak ennyi kellett ahhoz, hogy behatoljanak a vil\u00e1g egyik legbiztons\u00e1gtudatosabb v\u00e1llalat\u00e1hoz.<br \/>\nCsapata eszk\u00f6zl\u00e1nca val\u00f3sz\u00edn\u0171leg kev\u00e9sb\u00e9 biztons\u00e1gos, mint a GitHub\u00e9. Cselekedjen ennek megfelel\u0151en.<\/p>\n<p><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"BlogPosting\",\"headline\":\"GitHub confirms internal repository breach via poisoned VS Code extension\",\"description\":\"A malicious Nx Console VS Code extension was live for 11-18 minutes on 18.5.2026 - long enough to breach GitHub's internal repos. Here is what happened and\u2026\",\"url\":\"https:\/\/datatip.eu\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension\",\"datePublished\":\"2026-05-25T09:21:22.520Z\",\"dateModified\":\"2026-05-25T09:21:22.520Z\",\"author\":{\"@type\":\"Organization\",\"name\":\"DataTip\"},\"publisher\":{\"@type\":\"Organization\",\"name\":\"datatip.eu\"},\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datatip.eu\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension\"},\"image\":\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/05\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension-cover-1.webp\",\"wordCount\":2148,\"timeRequired\":\"PT10M\",\"inLanguage\":\"en\"}<\/script><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"BreadcrumbList\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/datatip.eu\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\/\/datatip.eu\/blog\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"GitHub confirms internal repository breach via poisoned VS Code extension\",\"item\":\"https:\/\/datatip.eu\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension\"}]}<\/script><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Was the Nx Console extension itself compromised, or was it a fake upload?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The Nx team confirmed that the legitimate Nx Console extension was compromised. The malicious version 18.95.0 was uploaded to the legitimate extension's page on the Visual Studio Marketplace. This was not a typosquatting attack or a fake extension - it was a direct compromise of the official build and release pipeline.\"}},{\"@type\":\"Question\",\"name\":\"How can I check if I downloaded the malicious version?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Check your VS Code extension versions. If you have Nx Console version 18.95.0 installed, you may have been affected. Update to the latest safe version immediately and review your GitHub access logs and local environment for any signs of compromise.\"}},{\"@type\":\"Question\",\"name\":\"Should I stop using VS Code extensions entirely?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The solution is not to abandon developer tools but to manage them with the same rigor you apply to production dependencies. Pin versions, review updates, and audit permissions. The risk is real, but it is manageable with the right practices.\"}},{\"@type\":\"Question\",\"name\":\"How long was the malicious extension available?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The malicious version 18.95.0 was live on the Visual Studio Marketplace for 11-18 minutes on 18.5.2026. While this is a short window, automated attacks can exploit it effectively.\"}},{\"@type\":\"Question\",\"name\":\"What should I do if I suspect my machine was compromised?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Rotate all credentials stored on the affected machine, review access logs for your GitHub and other cloud accounts, run a security scan, and consider a clean reinstall of your development environment. Contact your security team if you have one.\"}}]}<\/script><br \/>\n<!-- datatip-blog-upgrade-cta:2026-07-06:start --><\/p>\n<section class=\"datatip-blog-upgrade datatip-blog-upgrade-cta\">\n<h2>K\u00f6vetkez\u0151 l\u00e9p\u00e9s<\/h2>\n<p>Vizsg\u00e1lja fel\u00fcl a fejleszt\u0151i eszk\u00f6z\u00f6k kock\u00e1zat\u00e1t, ne csak az \u00e9les infrastrukt\u00far\u00e1t. <a href=\"https:\/\/www.datatip.eu\/#contact\" target=\"_blank\" rel=\"noopener\">Besz\u00e9ljen a DataTip csapat\u00e1val<\/a>.<\/p>\n<\/section>\n<p><!-- datatip-blog-upgrade-cta:2026-07-06:end --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Egy megm\u00e9rgezett VS Code-b\u0151v\u00edtm\u00e9ny megmutatja, mi\u00e9rt kell a fejleszt\u0151i eszk\u00f6z\u00f6kre is ell\u00e1t\u00e1sil\u00e1nc-kontroll, b\u0151v\u00edtm\u00e9nyszab\u00e1lyzat, titokkezel\u00e9si higi\u00e9nia \u00e9s incidenskezel\u00e9si terv.<\/p>\n","protected":false},"author":1,"featured_media":159899,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rs_blank_template":"","rs_page_bg_color":"","slide_template_v7":"","footnotes":""},"categories":[1185,1195],"tags":[1248,1280,1299,1317,1330],"class_list":["post-183005","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologia","category-biztonsag","tag-fejlesztok","tag-nx-console-hu","tag-biztonsag","tag-ellatasilanc-tamadas","tag-vs-code-hu"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra - DATATIP<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/\" \/>\n<meta property=\"og:locale\" content=\"hu_HU\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra - DATATIP\" \/>\n<meta property=\"og:description\" content=\"Egy megm\u00e9rgezett VS Code-b\u0151v\u00edtm\u00e9ny megmutatja, mi\u00e9rt kell a fejleszt\u0151i eszk\u00f6z\u00f6kre is ell\u00e1t\u00e1sil\u00e1nc-kontroll, b\u0151v\u00edtm\u00e9nyszab\u00e1lyzat, titokkezel\u00e9si higi\u00e9nia \u00e9s incidenskezel\u00e9si terv.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/\" \/>\n<meta property=\"og:site_name\" content=\"DATATIP\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/facebook.com\/datatip.eu\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-25T09:21:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-19T06:39:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"DataTip\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Szerz\u0151:\" \/>\n\t<meta name=\"twitter:data1\" content=\"DataTip\" \/>\n\t<meta name=\"twitter:label2\" content=\"Becs\u00fclt olvas\u00e1si id\u0151\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 perc\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/\"},\"author\":{\"name\":\"DataTip\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#\\\/schema\\\/person\\\/42e58f2c85d280383632fe4803e70928\"},\"headline\":\"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra\",\"datePublished\":\"2026-05-25T09:21:23+00:00\",\"dateModified\":\"2026-09-19T06:39:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/\"},\"wordCount\":2258,\"publisher\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"keywords\":[\"Fejleszt\u0151k\",\"Nx Console\",\"Biztons\u00e1g\",\"Ell\u00e1t\u00e1sil\u00e1nc-t\u00e1mad\u00e1s\",\"VS Code\"],\"articleSection\":[\"Technol\u00f3gia\",\"Biztons\u00e1g\"],\"inLanguage\":\"hu\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/\",\"name\":\"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra - DATATIP\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"datePublished\":\"2026-05-25T09:21:23+00:00\",\"dateModified\":\"2026-09-19T06:39:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#breadcrumb\"},\"inLanguage\":\"hu\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"hu\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"width\":2400,\"height\":1350,\"caption\":\"High resolution article-specific DataTip cover image for \\\"GitHub confirms internal repository breach via poisoned VS Code extension\\\".\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/fooldal\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#website\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/\",\"name\":\"DATATIP\",\"description\":\"MAKES IT EASIER\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"hu\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#organization\",\"name\":\"DATATIP\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hu\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/cropped-image002.jpg\",\"contentUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/cropped-image002.jpg\",\"width\":512,\"height\":512,\"caption\":\"DATATIP\"},\"image\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"http:\\\/\\\/facebook.com\\\/datatip.eu\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/#\\\/schema\\\/person\\\/42e58f2c85d280383632fe4803e70928\",\"name\":\"DataTip\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hu\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g\",\"caption\":\"DataTip\"},\"url\":\"https:\\\/\\\/www.datatip.eu\\\/hu\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra - DATATIP","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/","og_locale":"hu_HU","og_type":"article","og_title":"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra - DATATIP","og_description":"Egy megm\u00e9rgezett VS Code-b\u0151v\u00edtm\u00e9ny megmutatja, mi\u00e9rt kell a fejleszt\u0151i eszk\u00f6z\u00f6kre is ell\u00e1t\u00e1sil\u00e1nc-kontroll, b\u0151v\u00edtm\u00e9nyszab\u00e1lyzat, titokkezel\u00e9si higi\u00e9nia \u00e9s incidenskezel\u00e9si terv.","og_url":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/","og_site_name":"DATATIP","article_publisher":"http:\/\/facebook.com\/datatip.eu","article_published_time":"2026-05-25T09:21:23+00:00","article_modified_time":"2026-09-19T06:39:29+00:00","og_image":[{"width":2400,"height":1350,"url":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","type":"image\/jpeg"}],"author":"DataTip","twitter_card":"summary_large_image","twitter_misc":{"Szerz\u0151:":"DataTip","Becs\u00fclt olvas\u00e1si id\u0151":"11 perc"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#article","isPartOf":{"@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/"},"author":{"name":"DataTip","@id":"https:\/\/www.datatip.eu\/hu\/#\/schema\/person\/42e58f2c85d280383632fe4803e70928"},"headline":"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra","datePublished":"2026-05-25T09:21:23+00:00","dateModified":"2026-09-19T06:39:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/"},"wordCount":2258,"publisher":{"@id":"https:\/\/www.datatip.eu\/hu\/#organization"},"image":{"@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#primaryimage"},"thumbnailUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","keywords":["Fejleszt\u0151k","Nx Console","Biztons\u00e1g","Ell\u00e1t\u00e1sil\u00e1nc-t\u00e1mad\u00e1s","VS Code"],"articleSection":["Technol\u00f3gia","Biztons\u00e1g"],"inLanguage":"hu"},{"@type":"WebPage","@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/","url":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/","name":"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra - DATATIP","isPartOf":{"@id":"https:\/\/www.datatip.eu\/hu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#primaryimage"},"image":{"@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#primaryimage"},"thumbnailUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","datePublished":"2026-05-25T09:21:23+00:00","dateModified":"2026-09-19T06:39:29+00:00","breadcrumb":{"@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#breadcrumb"},"inLanguage":"hu","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/"]}]},{"@type":"ImageObject","inLanguage":"hu","@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#primaryimage","url":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","contentUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","width":2400,"height":1350,"caption":"High resolution article-specific DataTip cover image for \"GitHub confirms internal repository breach via poisoned VS Code extension\"."},{"@type":"BreadcrumbList","@id":"https:\/\/www.datatip.eu\/hu\/vs-code-bovitmenyen-keresztuli-incidens-figyelmeztetes-az-eszkozlancra\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.datatip.eu\/hu\/fooldal\/"},{"@type":"ListItem","position":2,"name":"Egy VS Code-b\u0151v\u00edtm\u00e9nyen kereszt\u00fcli incidens figyelmeztet\u00e9s a teljes eszk\u00f6zl\u00e1nc\u00e1ra"}]},{"@type":"WebSite","@id":"https:\/\/www.datatip.eu\/hu\/#website","url":"https:\/\/www.datatip.eu\/hu\/","name":"DATATIP","description":"MAKES IT EASIER","publisher":{"@id":"https:\/\/www.datatip.eu\/hu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.datatip.eu\/hu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"hu"},{"@type":"Organization","@id":"https:\/\/www.datatip.eu\/hu\/#organization","name":"DATATIP","url":"https:\/\/www.datatip.eu\/hu\/","logo":{"@type":"ImageObject","inLanguage":"hu","@id":"https:\/\/www.datatip.eu\/hu\/#\/schema\/logo\/image\/","url":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2025\/01\/cropped-image002.jpg","contentUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2025\/01\/cropped-image002.jpg","width":512,"height":512,"caption":"DATATIP"},"image":{"@id":"https:\/\/www.datatip.eu\/hu\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/facebook.com\/datatip.eu"]},{"@type":"Person","@id":"https:\/\/www.datatip.eu\/hu\/#\/schema\/person\/42e58f2c85d280383632fe4803e70928","name":"DataTip","image":{"@type":"ImageObject","inLanguage":"hu","@id":"https:\/\/secure.gravatar.com\/avatar\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g","caption":"DataTip"},"url":"https:\/\/www.datatip.eu\/hu\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/posts\/183005","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/comments?post=183005"}],"version-history":[{"count":1,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/posts\/183005\/revisions"}],"predecessor-version":[{"id":183432,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/posts\/183005\/revisions\/183432"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/media\/159899"}],"wp:attachment":[{"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/media?parent=183005"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/categories?post=183005"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.datatip.eu\/hu\/wp-json\/wp\/v2\/tags?post=183005"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}