{"id":181839,"date":"2026-05-25T09:21:23","date_gmt":"2026-05-25T09:21:23","guid":{"rendered":"https:\/\/www.datatip.eu\/?p=181839"},"modified":"2026-08-23T18:39:03","modified_gmt":"2026-08-23T18:39:03","slug":"unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec","status":"publish","type":"post","link":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/","title":{"rendered":"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec"},"content":{"rendered":"<p class=\"article-byline\" style=\"color:inherit;opacity:0.7;font-size:0.9em;margin-bottom:1.25em;\">Autor: DataTip \u00b7 Publikovan\u00e9 <time datetime=\"2026-05-25T09:21:23\">25. m\u00e1ja 2026<\/time><\/p>\n<div class=\"article-summary\" style=\"border-left:3px solid rgba(127,127,127,0.4);background:rgba(127,127,127,0.1);color:inherit;padding:1em 1.25em;margin-bottom:1.5em;border-radius:6px;line-height:1.6\">\n<p style=\"margin:0;\"><strong>TL;DR:<\/strong> Kompromit\u00e1cia legit\u00edmneho roz\u0161\u00edrenia Nx Console pre VS Code ukazuje, \u017ee v\u00fdvoj\u00e1rske n\u00e1stroje m\u00f4\u017eu by\u0165 vysoko hodnotn\u00fdm \u00fato\u010dn\u00fdm povrchom, nielen produk\u010dn\u00e1 infra\u0161trukt\u00fara alebo z\u00e1vislosti. \u010cl\u00e1nok odpor\u00fa\u010da zak\u00e1za\u0165 automatick\u00e9 aktualiz\u00e1cie, pripn\u00fa\u0165 presn\u00e9 verzie roz\u0161\u00edren\u00ed, auditova\u0165 povolenia, monitorova\u0165 spr\u00e1vanie, udr\u017eiava\u0165 pl\u00e1ny n\u00e1vratu a zv\u00e1\u017ei\u0165 spravovan\u00e9 s\u00fakromn\u00e9 trhovisk\u00e1. T\u00edmy by mali inventarizova\u0165 roz\u0161\u00edrenia a zavies\u0165 politiky schva\u013eovania a reakcie pre cel\u00fd svoj n\u00e1strojov\u00fd re\u0165azec.<\/p>\n<ul style=\"margin:0.6em 0 0;padding-left:1.25em;\">\n<li style=\"margin:0.25em 0;\">\u0160kodliv\u00e1 verzia Nx Console 18.95.0 bola nahran\u00e1 do legit\u00edmneho zoznamu roz\u0161\u00edren\u00ed a bola k dispoz\u00edcii 11\u201318 min\u00fat.<\/li>\n<li style=\"margin:0.25em 0;\">\u010cl\u00e1nok odpor\u00fa\u010da zak\u00e1za\u0165 automatick\u00e9 aktualiz\u00e1cie roz\u0161\u00edren\u00ed VS Code a pripn\u00fa\u0165 presn\u00e9 verzie v t\u00edmovej konfigur\u00e1cii.<\/li>\n<li style=\"margin:0.25em 0;\">T\u00edmy by mali inventarizova\u0165 roz\u0161\u00edrenia, skontrolova\u0165 povolenia, monitorova\u0165 spr\u00e1vanie a udr\u017eiava\u0165 pl\u00e1n n\u00e1vratu pre kompromitovan\u00e9 verzie.<\/li>\n<li style=\"margin:0.25em 0;\">V\u00fdvoj\u00e1rske n\u00e1stroje ako editory, termin\u00e1ly, Git klienti a CI\/CD runneri by mali by\u0165 pova\u017eovan\u00e9 za potenci\u00e1lne \u00fato\u010dn\u00e9 vektory.<\/li>\n<li style=\"margin:0.25em 0;\">S\u00fakromn\u00e9 trhovisk\u00e1 alebo spravovan\u00e9 registre m\u00f4\u017eu poskytn\u00fa\u0165 silnej\u0161iu kontrolu, hoci prid\u00e1vaj\u00fa prev\u00e1dzkov\u00fa r\u00e9\u017eiu a nemusia by\u0165 vhodn\u00e9 pre mal\u00e9 t\u00edmy.<\/li>\n<\/ul>\n<\/div>\n<p><!-- datatip-blog-upgrade:2026-07-06:start --><\/p>\n<section class=\"datatip-blog-upgrade datatip-blog-upgrade-opening\">\n<p><strong>Tento \u00fanik je d\u00f4le\u017eit\u00fd, preto\u017ee \u00fatok neza\u010dal v produk\u010dnej infra\u0161trukt\u00fare. Za\u010dal v d\u00f4veryhodnom v\u00fdvoj\u00e1rskom n\u00e1stroji, ktor\u00fd je s\u00fa\u010das\u0165ou ka\u017edodennej pr\u00e1ce.<\/strong><\/p>\n<ul style=\"clear:both;\">\n<li>Intern\u00e1 dokument\u00e1cia a sledovanie probl\u00e9mov, ktor\u00e9 by mohli odhali\u0165 bezpe\u010dnostn\u00e9 zranite\u013enosti.<br \/>\nRozsah \u00faniku je st\u00e1le predmetom vy\u0161etrovania, ale potenci\u00e1lny dopad je v\u00fdznamn\u00fd. Preto je tento incident d\u00f4le\u017eit\u00fd aj nad r\u00e1mec GitHubu.<\/li>\n<\/ul>\n<\/section>\n<h2 id=\"response-and-mitigation-steps\" style=\"clear:both;\">Reakcia a kroky na zmiernenie rizika<\/h2>\n<p>GitHub zareagoval odstr\u00e1nen\u00edm \u0161kodliv\u00e9ho roz\u0161\u00edrenia z Visual Studio Marketplace v priebehu 11\u201318 min\u00fat. N\u00e1sledne boli rotovan\u00e9 intern\u00e9 poverenia, skontrolovan\u00e9 pr\u00edstupov\u00e9 logy a spusten\u00e9 intern\u00e9 vy\u0161etrovanie. T\u00edm Nx tie\u017e vydal vyhl\u00e1senie potvrdzuj\u00face, \u017ee legit\u00edmne roz\u0161\u00edrenie bolo kompromitovan\u00e9, a odpor\u00fa\u010da pou\u017e\u00edvate\u013eom aktualizova\u0165 na najnov\u0161iu bezpe\u010dn\u00fa verziu.<br \/>\nPre n\u00e1s ostatn\u00fdch mus\u00ed reakcia z\u00e1js\u0165 \u010falej. Odpor\u00fa\u010dame nasledovn\u00e9:<\/p>\n<ul style=\"clear:both;\">\n<li><strong>Zak\u00e1\u017ete automatick\u00e9 aktualiz\u00e1cie roz\u0161\u00edren\u00ed<\/strong> vo VS Code. Toto je jedin\u00e1 naj\u00fa\u010dinnej\u0161ia zmena, ktor\u00fa m\u00f4\u017eete dnes urobi\u0165. Manu\u00e1lna kontrola aktualiz\u00e1ci\u00ed v\u00e1m d\u00e1va \u0161ancu v\u0161imn\u00fa\u0165 si podozriv\u00e9 zmeny verzi\u00ed alebo si pred aktualiz\u00e1ciou pre\u010d\u00edta\u0165 pozn\u00e1mky k vydaniu.<\/li>\n<li><strong>Uzamknite verzie roz\u0161\u00edren\u00ed<\/strong> v konfigura\u010dn\u00fdch s\u00faboroch t\u00edmu. Pou\u017eite s\u00fabor odpor\u00fa\u010dan\u00ed <code>extensions.json<\/code> v adres\u00e1ri <code>.vscode<\/code> na \u0161pecifikovanie presn\u00fdch verzi\u00ed, nielen ID roz\u0161\u00edren\u00ed.<\/li>\n<li><strong>Auditujte povolenia roz\u0161\u00edren\u00ed<\/strong>. Roz\u0161\u00edrenia VS Code m\u00f4\u017eu po\u017eadova\u0165 schopnosti ako pr\u00edstup k sieti, pr\u00edstup k s\u00faborov\u00e9mu syst\u00e9mu a sp\u00fa\u0161\u0165anie pr\u00edkazov. Skontrolujte, \u010do ka\u017ed\u00e9 pou\u017e\u00edvan\u00e9 roz\u0161\u00edrenie skuto\u010dne potrebuje.<\/li>\n<li><strong>Sledujte spr\u00e1vanie roz\u0161\u00edren\u00ed<\/strong>. N\u00e1stroje ako vstavan\u00e9 logovanie hostite\u013ea roz\u0161\u00edren\u00ed VS Code v\u00e1m m\u00f4\u017eu pom\u00f4c\u0165 odhali\u0165 neo\u010dak\u00e1van\u00fa aktivitu.<br \/>\n<strong>Kedy tieto kroky nepou\u017e\u00edva\u0165<\/strong>: Ak sa v\u00e1\u0161 t\u00edm spolieha na r\u00fdchle bezpe\u010dnostn\u00e9 opravy a nem\u00f4\u017ee si dovoli\u0165 \u017eiadne oneskorenie pri prij\u00edman\u00ed aktualiz\u00e1ci\u00ed, mo\u017eno budete musie\u0165 vyv\u00e1\u017ei\u0165 riziko oneskorenej aktualiz\u00e1cie oproti riziku otr\u00e1ven\u00e9ho roz\u0161\u00edrenia. V takom pr\u00edpade zv\u00e1\u017ete pou\u017eitie s\u00fakromn\u00e9ho trhoviska s roz\u0161\u00edreniami alebo kur\u00e1torsk\u00e9ho registra roz\u0161\u00edren\u00ed, kde m\u00e1te pod kontrolou tempo aktualiz\u00e1ci\u00ed.<\/li>\n<\/ul>\n<h3 id=\"a-practical-audit-checklist-for-your-team\" style=\"clear:both;\">Praktick\u00fd kontroln\u00fd zoznam auditu pre v\u00e1\u0161 t\u00edm<\/h3>\n<p>Tu je konkr\u00e9tny s\u00fabor krokov, ktor\u00e9 m\u00f4\u017eete podnikn\u00fa\u0165 tento t\u00fd\u017ede\u0148:<\/p>\n<ol style=\"clear:both;\">\n<li><strong>Zinventarizujte v\u0161etky roz\u0161\u00edrenia VS Code<\/strong> pou\u017e\u00edvan\u00e9 va\u0161\u00edm t\u00edmom. Exportujte zoznam z ka\u017ed\u00e9ho v\u00fdvoj\u00e1rskeho po\u010d\u00edta\u010da a porovnajte ho so zn\u00e1mym bezpe\u010dn\u00fdm z\u00e1kladom.<\/li>\n<li><strong>Skontrolujte povolenia roz\u0161\u00edren\u00ed<\/strong> pre ka\u017ed\u00e9 roz\u0161\u00edrenie vo va\u0161om invent\u00e1ri. H\u013eadajte roz\u0161\u00edrenia, ktor\u00e9 po\u017eaduj\u00fa pr\u00edstup k sieti alebo s\u00faborov\u00e9mu syst\u00e9mu bez jasn\u00e9ho d\u00f4vodu.<\/li>\n<li><strong>Nastavte uzamknutie verzi\u00ed roz\u0161\u00edren\u00ed<\/strong> v s\u00fabore <code>.vscode\/extensions.json<\/code> v\u00e1\u0161ho t\u00edmu. Pou\u017eite presn\u00e9 verzie, nie rozsahy.<\/li>\n<li><strong>Zak\u00e1\u017ete automatick\u00e9 aktualiz\u00e1cie<\/strong> v nastaveniach VS Code: <code>\"extensions.autoUpdate\": false<\/code>.<\/li>\n<li><strong>Vytvorte pl\u00e1n n\u00e1vratu<\/strong> pre kompromitovan\u00e9 roz\u0161\u00edrenia. Vedzte, ktor\u00e9 verzie s\u00fa bezpe\u010dn\u00e9 a ako sa k nim r\u00fdchlo vr\u00e1ti\u0165.<\/li>\n<\/ol>\n<h2 id=\"why-this-matters-for-your-entire-toolchain\" style=\"clear:both;\">Pre\u010do je to d\u00f4le\u017eit\u00e9 pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec<\/h2>\n<p>Tento incident nie je izolovan\u00e1 udalos\u0165. Je to sign\u00e1l, \u017ee \u00fato\u010dn\u00edci postupuj\u00fa od z\u00e1vislost\u00ed k v\u00fdvoj\u00e1rskym n\u00e1strojom. V\u00e1\u0161 editor, v\u00e1\u0161 termin\u00e1lov\u00fd emul\u00e1tor, v\u00e1\u0161 Git klient, v\u00e1\u0161 CI\/CD runner \u2013 ka\u017ed\u00fd n\u00e1stroj, ktor\u00fd pou\u017e\u00edvate na p\u00edsanie a nasadzovanie k\u00f3du, je potenci\u00e1lnym vektorom \u00fatoku.<br \/>\nU\u017e sme p\u00edsali o rizik\u00e1ch <a href=\"\/the-accidental-ddos-threatening-your-product-velocity\/\">&#39;N\u00e1hodn\u00e9ho DDoS&#39; ohrozuj\u00faceho r\u00fdchlos\u0165 v\u00e1\u0161ho produktu<\/a> a o tom, pre\u010do je myslenie na prvom mieste v \u00e9re automatizovan\u00fdch n\u00e1strojov\u00fdch re\u0165azcov d\u00f4le\u017eitej\u0161ie ne\u017e kedyko\u013evek predt\u00fdm. Tento \u00fatok je konkr\u00e9tnym pr\u00edkladom, pre\u010do <a href=\"\/code-is-a-liability-why-we-prioritize-thinking-first-engineering\/\">uprednost\u0148ujeme in\u017einierstvo zalo\u017een\u00e9 na myslen\u00ed<\/a> pred slep\u00fdm d\u00f4verovan\u00edm n\u00e1strojom, ktor\u00e9 pou\u017e\u00edvame.<br \/>\nOkno \u00fatoku \u2013 <strong>11\u201318 min\u00fat<\/strong> \u2013 je tie\u017e pou\u010dn\u00e9. \u00dato\u010dn\u00edci nepotrebuj\u00fa dni ani t\u00fd\u017edne. Potrebuj\u00fa min\u00faty. Otr\u00e1ven\u00e9 roz\u0161\u00edrenie m\u00f4\u017ee by\u0165 stiahnut\u00e9, nain\u0161talovan\u00e9 a spusten\u00e9 sk\u00f4r, ne\u017e si niekto v\u0161imne, \u017ee sa zmenilo \u010d\u00edslo verzie. V \u010dase, ke\u010f je roz\u0161\u00edrenie stiahnut\u00e9 z trhoviska, je \u0161koda u\u017e hotov\u00e1.<\/p>\n<h3 id=\"the-broader-trend-ide-extensions-as-attack-vectors\" style=\"clear:both;\">\u0160ir\u0161\u00ed trend: Roz\u0161\u00edrenia IDE ako vektory \u00fatokov<\/h3>\n<p>Toto nie je prv\u00fdkr\u00e1t, \u010do bolo roz\u0161\u00edrenie VS Code zneu\u017eit\u00e9, a nebude to ani posledn\u00fdkr\u00e1t. U\u017e sme videli:<\/p>\n<ul style=\"clear:both;\">\n<li>\u0160kodliv\u00e9 roz\u0161\u00edrenia, ktor\u00e9 kradn\u00fa k\u013e\u00fa\u010de kryptomenov\u00fdch pe\u0148a\u017eeniek.<\/li>\n<li>Roz\u0161\u00edrenia, ktor\u00e9 exfiltruj\u00fa premenn\u00e9 prostredia a API tokeny.<\/li>\n<li>Roz\u0161\u00edrenia, ktor\u00e9 vkladaj\u00fa reklamy alebo presmeruj\u00fa prev\u00e1dzku.<\/li>\n<li>Roz\u0161\u00edrenia, ktor\u00e9 in\u0161taluj\u00fa zadn\u00e9 vr\u00e1tka pre trval\u00fd pr\u00edstup.<br \/>\n\u010co rob\u00ed tento incident odli\u0161n\u00fdm, je cie\u013e a sofistikovanos\u0165. \u00dato\u010dn\u00edk sa konkr\u00e9tne zameral na intern\u00e9 repozit\u00e1re GitHubu, nie na n\u00e1hodn\u00e9 v\u00fdvoj\u00e1rske po\u010d\u00edta\u010de. To nazna\u010duje cielen\u00fd \u00fatok, nie oper\u00e1ciu typu \u201evystre\u013e a modli sa\u201c.<\/li>\n<\/ul>\n<h2 id=\"what-this-means-for-your-team\" style=\"clear:both;\">\u010co to znamen\u00e1 pre v\u00e1\u0161 t\u00edm<\/h2>\n<p>Ak riadite v\u00fdvoj\u00e1rsky t\u00edm, tento incident by v\u00e1s mal podnieti\u0165 k prehodnoteniu bezpe\u010dnostn\u00fdch polit\u00edk v\u00e1\u0161ho n\u00e1strojov\u00e9ho re\u0165azca. Tu s\u00fa ot\u00e1zky, ktor\u00e9 by ste si mali kl\u00e1s\u0165:<\/p>\n<ul style=\"clear:both;\">\n<li>M\u00e1te politiku na schva\u013eovanie roz\u0161\u00edren\u00ed VS Code?<\/li>\n<li>S\u00fa aktualiz\u00e1cie roz\u0161\u00edren\u00ed kontrolovan\u00e9 pred ich nasaden\u00edm do v\u00e1\u0161ho t\u00edmu?<\/li>\n<li>Dok\u00e1\u017eete zisti\u0165, ke\u010f sa v\u00fdvoj\u00e1rsky n\u00e1stroj za\u010dne spr\u00e1va\u0165 neo\u010dak\u00e1vane?<\/li>\n<li>M\u00e1te pl\u00e1n n\u00e1vratu pre pr\u00edpad kompromitovan\u00e9ho roz\u0161\u00edrenia?<\/li>\n<li>Sledujete povolenia roz\u0161\u00edren\u00ed naprie\u010d va\u0161\u00edm t\u00edmom?<\/li>\n<li>M\u00e1te sp\u00f4sob, ako vyn\u00fati\u0165 ukotvenie verzi\u00ed roz\u0161\u00edren\u00ed na v\u0161etk\u00fdch v\u00fdvoj\u00e1rskych po\u010d\u00edta\u010doch?<br \/>\nV\u00e4\u010d\u0161ina t\u00edmov odpoved\u00e1 \u201enie\u201c na najmenej tri z t\u00fdchto ot\u00e1zok. To sa mus\u00ed zmeni\u0165.<br \/>\nPre individu\u00e1lnych v\u00fdvoj\u00e1rov je ponau\u010denie jednoduch\u0161ie: pova\u017eujte ka\u017ed\u00e9 roz\u0161\u00edrenie za potenci\u00e1lny vektor \u00fatoku. Skontrolujte povolenia. Ukotvite verzie. Ned\u00f4verujte automatick\u00fdm aktualiz\u00e1ci\u00e1m.<\/li>\n<\/ul>\n<h3 id=\"the-role-of-private-extension-marketplaces\" style=\"clear:both;\">\u00daloha s\u00fakromn\u00fdch trhov\u00edsk s roz\u0161\u00edreniami<\/h3>\n<p>Pre t\u00edmy, ktor\u00e9 potrebuj\u00fa pr\u00edsnej\u0161iu kontrolu, stoj\u00ed za zv\u00e1\u017eenie s\u00fakromn\u00e9 trhovisko s roz\u0161\u00edreniami. N\u00e1stroje ako Open VSX alebo samostatne hostovan\u00e9 registre roz\u0161\u00edren\u00ed v\u00e1m umo\u017e\u0148uj\u00fa vybra\u0165, ktor\u00e9 roz\u0161\u00edrenia s\u00fa pre v\u00e1\u0161 t\u00edm k dispoz\u00edcii, a riadi\u0165 tempo aktualiz\u00e1ci\u00ed. To prin\u00e1\u0161a prev\u00e1dzkov\u00fa r\u00e9\u017eiu, ale poskytuje bezpe\u010dnostn\u00fa hranicu, ktor\u00fa verejn\u00e9 trhovisko nedok\u00e1\u017ee pon\u00faknu\u0165.<br \/>\n<strong>Kedy nepou\u017e\u00edva\u0165 s\u00fakromn\u00e9 trhovisko<\/strong>: Ak je v\u00e1\u0161 t\u00edm mal\u00fd (menej ako 10 v\u00fdvoj\u00e1rov) alebo pou\u017e\u00edva \u0161irok\u00fa \u0161k\u00e1lu \u0161pecializovan\u00fdch roz\u0161\u00edren\u00ed, r\u00e9\u017eia spojen\u00e1 so spr\u00e1vou s\u00fakromn\u00e9ho registra m\u00f4\u017ee prev\u00e1\u017ei\u0165 nad v\u00fdhodami. V takom pr\u00edpade sa zamerajte na fixovanie verzi\u00ed a manu\u00e1lnu kontrolu aktualiz\u00e1ci\u00ed.<\/p>\n<figure class=\"datatip-blog-upgrade-image\" data-datatip-blog-image=\"159700\"><img width=\"1672\" height=\"941\" src=\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline.jpg\" alt=\"Tmav\u00fd redak\u010dn\u00fd vizu\u00e1l DataTip pre: Naru\u0161enie roz\u0161\u00edrenia VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec.\" class=\"wp-image-180792\" loading=\"lazy\" decoding=\"async\" srcset=\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline.jpg 1672w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-300x169.jpg 300w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-1024x576.jpg 1024w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-768x432.jpg 768w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-1536x864.jpg 1536w, https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/07\/159700-a-vs-code-extension-breach-is-a-warning-about-your-whole-toolchain-inline-350x197.jpg 350w\" sizes=\"auto, (max-width: 1672px) 100vw, 1672px\" \/><\/figure>\n<h2 id=\"key-takeaways\" style=\"clear:both;\">K\u013e\u00fa\u010dov\u00e9 poznatky<\/h2>\n<ul style=\"clear:both;\">\n<li>\u0160kodliv\u00e9 roz\u0161\u00edrenie Nx Console pre VS Code (v18.95.0) bolo na Visual Studio Marketplace 11\u201318 min\u00fat 18.5.2026 a preniklo do intern\u00fdch repozit\u00e1rov GitHubu.<\/li>\n<li>Vektor \u00fatoku bol d\u00f4veryhodn\u00fd v\u00fdvoj\u00e1rsky n\u00e1stroj, nie z\u00e1vislos\u0165 alebo sie\u0165ov\u00e1 zranite\u013enos\u0165.<\/li>\n<li>Zak\u00e1\u017ete automatick\u00e9 aktualiz\u00e1cie roz\u0161\u00edren\u00ed a fixujte verzie roz\u0161\u00edren\u00ed, aby ste zn\u00ed\u017eili svoju expoz\u00edciu vo\u010di podobn\u00fdm \u00fatokom.<\/li>\n<li>Tento incident potvrdzuje, \u017ee v\u00fdvoj\u00e1rske n\u00e1stroje s\u00fa akt\u00edvnym a vysoko hodnotn\u00fdm \u00fato\u010dn\u00fdm povrchom.<\/li>\n<li>Praktick\u00fd kontroln\u00fd zoznam auditu m\u00f4\u017ee pom\u00f4c\u0165 v\u00e1\u0161mu t\u00edmu pos\u00fadi\u0165 a zmierni\u0165 toto riziko u\u017e tento t\u00fd\u017ede\u0148.<\/li>\n<\/ul>\n<h2 id=\"frequently-asked-questions\" style=\"clear:both;\">\u010casto kladen\u00e9 ot\u00e1zky<\/h2>\n<h3 id=\"was-the-nx-console-extension-itself-compromised-or-was-it-a-fake-upload\" style=\"clear:both;\">Bolo samotn\u00e9 roz\u0161\u00edrenie Nx Console kompromitovan\u00e9, alebo i\u0161lo o falo\u0161n\u00e9 nahranie?<\/h3>\n<p>T\u00edm Nx potvrdil, \u017ee legit\u00edmne roz\u0161\u00edrenie Nx Console bolo kompromitovan\u00e9. \u0160kodliv\u00e1 verzia 18.95.0 bola nahran\u00e1 na str\u00e1nku legit\u00edmneho roz\u0161\u00edrenia na Visual Studio Marketplace. Ne\u0161lo o \u00fatok typosquattingom alebo falo\u0161n\u00e9 roz\u0161\u00edrenie \u2013 i\u0161lo o priame naru\u0161enie ofici\u00e1lneho zostavovacieho a distribu\u010dn\u00e9ho re\u0165azca.<\/p>\n<h3 id=\"how-can-i-check-if-i-downloaded-the-malicious-version\" style=\"clear:both;\">Ako m\u00f4\u017eem skontrolova\u0165, \u010di som si stiahol \u0161kodliv\u00fa verziu?<\/h3>\n<p>Skontrolujte verzie svojich roz\u0161\u00edren\u00ed VS Code. Ak m\u00e1te nain\u0161talovan\u00fa verziu Nx Console 18.95.0, mohli ste by\u0165 ovplyvnen\u00ed. Okam\u017eite aktualizujte na najnov\u0161iu bezpe\u010dn\u00fa verziu a skontrolujte svoje pr\u00edstupov\u00e9 logy GitHubu a lok\u00e1lne prostredie, \u010di nevykazuj\u00fa zn\u00e1mky kompromit\u00e1cie.<\/p>\n<h3 id=\"should-i-stop-using-vs-code-extensions-entirely\" style=\"clear:both;\">M\u00e1m \u00faplne presta\u0165 pou\u017e\u00edva\u0165 roz\u0161\u00edrenia VS Code?<\/h3>\n<p>Nie. Rie\u0161en\u00edm nie je opusti\u0165 v\u00fdvoj\u00e1rske n\u00e1stroje, ale spravova\u0165 ich s rovnakou d\u00f4slednos\u0165ou, ak\u00fa uplat\u0148ujete pri produk\u010dn\u00fdch z\u00e1vislostiach. Uzamykajte verzie, kontrolujte aktualiz\u00e1cie a preverujte opr\u00e1vnenia. Riziko je skuto\u010dn\u00e9, ale pri spr\u00e1vnych postupoch je zvl\u00e1dnute\u013en\u00e9.<\/p>\n<h3 id=\"how-long-was-the-malicious-extension-available\" style=\"clear:both;\">Ako dlho bolo \u0161kodliv\u00e9 roz\u0161\u00edrenie k dispoz\u00edcii?<\/h3>\n<p>\u0160kodliv\u00e1 verzia 18.95.0 bola na Visual Studio Marketplace k dispoz\u00edcii 11\u201318 min\u00fat 18. 5. 2026. Hoci ide o kr\u00e1tke okno, automatizovan\u00e9 \u00fatoky ho dok\u00e1\u017eu efekt\u00edvne vyu\u017ei\u0165.<\/p>\n<h3 id=\"what-should-i-do-if-i-suspect-my-machine-was-compromised\" style=\"clear:both;\">\u010co m\u00e1m robi\u0165, ak m\u00e1m podozrenie, \u017ee m\u00f4j po\u010d\u00edta\u010d bol napadnut\u00fd?<\/h3>\n<p>Obnovte v\u0161etky prihlasovacie \u00fadaje ulo\u017een\u00e9 v napadnutom po\u010d\u00edta\u010di, skontrolujte z\u00e1znamy pr\u00edstupu k svojmu GitHubu a \u010fal\u0161\u00edm cloudov\u00fdm \u00fa\u010dtom, spustite bezpe\u010dnostn\u00fa kontrolu a zv\u00e1\u017ete \u010dist\u00fa prein\u0161tal\u00e1ciu v\u00fdvoj\u00e1rskeho prostredia. Ak m\u00e1te bezpe\u010dnostn\u00fd t\u00edm, kontaktujte ho.<\/p>\n<h2 id=\"closing\" style=\"clear:both;\">Z\u00e1ver<\/h2>\n<p>Tento \u00fatok pripom\u00edna, \u017ee bezpe\u010dnos\u0165 nie je nie\u010do, \u010do prid\u00e1te dodato\u010dne. Je vlastnos\u0165ou ka\u017ed\u00e9ho rozhodnutia, ktor\u00e9 urob\u00edte o svojom v\u00fdvoj\u00e1rskom prostred\u00ed. \u0160kodliv\u00e9 roz\u0161\u00edrenie Nx Console bolo k dispoz\u00edcii 11\u201318 min\u00fat. To sta\u010dilo na to, aby preniklo do jednej z najbezpe\u010dnej\u0161\u00edch spolo\u010dnost\u00ed na svete.<br \/>\nV\u00e1\u0161 t\u00edmov\u00fd n\u00e1strojov\u00fd re\u0165azec je pravdepodobne menej bezpe\u010dn\u00fd ako ten GitHubov. Konajte pod\u013ea toho.<\/p>\n<p><!-- datatip-blog-upgrade-cta:2026-07-06:start --><\/p>\n<section class=\"datatip-blog-upgrade datatip-blog-upgrade-cta\">\n<h2>\u010eal\u0161\u00ed krok<\/h2>\n<p>Preverte riziko v\u00fdvoj\u00e1rskych n\u00e1strojov, nielen produk\u010dnej infra\u0161trukt\u00fary. <a href=\"https:\/\/www.datatip.eu\/#contact\" target=\"_blank\" rel=\"noopener\">Kontaktujte DataTip<\/a>.<\/p>\n<\/section>\n<p><!-- datatip-blog-upgrade-cta:2026-07-06:end --><\/p>\n<p><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"BlogPosting\",\"headline\":\"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec\",\"description\":\"Otr\u00e1ven\u00e9 roz\u0161\u00edrenie VS Code ukazuje, pre\u010do v\u00fdvoj\u00e1rske n\u00e1stroje potrebuj\u00fa kontroly dod\u00e1vate\u013esk\u00e9ho re\u0165azca, politiku roz\u0161\u00edren\u00ed, hygienu tajomstiev a pl\u00e1novanie reakcie na incidenty.\",\"url\":\"https:\/\/datatip.eu\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension\",\"datePublished\":\"2026-05-25T09:21:22.520Z\",\"dateModified\":\"2026-05-25T09:21:22.520Z\",\"author\":{\"@type\":\"Organization\",\"name\":\"DataTip\"},\"publisher\":{\"@type\":\"Organization\",\"name\":\"datatip.eu\"},\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datatip.eu\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension\"},\"image\":\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/05\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension-cover-1.webp\",\"wordCount\":2148,\"timeRequired\":\"PT10M\",\"inLanguage\":\"sk\"}<\/script><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"BreadcrumbList\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/datatip.eu\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\/\/datatip.eu\/blog\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"GitHub confirms internal repository breach via poisoned VS Code extension\",\"item\":\"https:\/\/datatip.eu\/github-confirms-internal-repository-breach-via-poisoned-vs-code-extension\"}]}<\/script><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Was the Nx Console extension itself compromised, or was it a fake upload?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The Nx team confirmed that the legitimate Nx Console extension was compromised. The malicious version 18.95.0 was uploaded to the legitimate extension's page on the Visual Studio Marketplace. This was not a typosquatting attack or a fake extension - it was a direct compromise of the official build and release pipeline.\"}},{\"@type\":\"Question\",\"name\":\"How can I check if I downloaded the malicious version?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Check your VS Code extension versions. If you have Nx Console version 18.95.0 installed, you may have been affected. Update to the latest safe version immediately and review your GitHub access logs and local environment for any signs of compromise.\"}},{\"@type\":\"Question\",\"name\":\"Should I stop using VS Code extensions entirely?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The solution is not to abandon developer tools but to manage them with the same rigor you apply to production dependencies. Pin versions, review updates, and audit permissions. The risk is real, but it is manageable with the right practices.\"}},{\"@type\":\"Question\",\"name\":\"How long was the malicious extension available?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The malicious version 18.95.0 was live on the Visual Studio Marketplace for 11-18 minutes on 18.5.2026. While this is a short window, automated attacks can exploit it effectively.\"}},{\"@type\":\"Question\",\"name\":\"What should I do if I suspect my machine was compromised?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Rotate all credentials stored on the affected machine, review access logs for your GitHub and other cloud accounts, run a security scan, and consider a clean reinstall of your development environment. Contact your security team if you have one.\"}}]}<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Otr\u00e1ven\u00e9 roz\u0161\u00edrenie VS Code ukazuje, pre\u010do v\u00fdvoj\u00e1rske n\u00e1stroje potrebuj\u00fa kontroly dod\u00e1vate\u013esk\u00e9ho re\u0165azca, politiku roz\u0161\u00edren\u00ed, hygienu tajomstiev a pl\u00e1novanie reakcie na incidenty.<\/p>\n","protected":false},"author":1,"featured_media":159899,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rs_blank_template":"","rs_page_bg_color":"","slide_template_v7":"","footnotes":""},"categories":[149,208],"tags":[203,204,205,206,207],"class_list":["post-181839","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","category-security","tag-security","tag-vs-code","tag-supply-chain-attack","tag-developers","tag-nx-console"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec - DATATIP<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec - DATATIP\" \/>\n<meta property=\"og:description\" content=\"Otr\u00e1ven\u00e9 roz\u0161\u00edrenie VS Code ukazuje, pre\u010do v\u00fdvoj\u00e1rske n\u00e1stroje potrebuj\u00fa kontroly dod\u00e1vate\u013esk\u00e9ho re\u0165azca, politiku roz\u0161\u00edren\u00ed, hygienu tajomstiev a pl\u00e1novanie reakcie na incidenty.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/\" \/>\n<meta property=\"og:site_name\" content=\"DATATIP\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/facebook.com\/datatip.eu\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-25T09:21:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-23T18:39:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"DataTip\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Autor\" \/>\n\t<meta name=\"twitter:data1\" content=\"DataTip\" \/>\n\t<meta name=\"twitter:label2\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 min\u00fat\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/\"},\"author\":{\"name\":\"DataTip\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#\\\/schema\\\/person\\\/42e58f2c85d280383632fe4803e70928\"},\"headline\":\"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec\",\"datePublished\":\"2026-05-25T09:21:23+00:00\",\"dateModified\":\"2026-08-23T18:39:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/\"},\"wordCount\":1894,\"publisher\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"keywords\":[\"Security\",\"VS Code\",\"Supply Chain Attack\",\"Developers\",\"Nx Console\"],\"articleSection\":[\"Technology\",\"Security\"],\"inLanguage\":\"sk-SK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/\",\"name\":\"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec - DATATIP\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"datePublished\":\"2026-05-25T09:21:23+00:00\",\"dateModified\":\"2026-08-23T18:39:03+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg\",\"width\":2400,\"height\":1350,\"caption\":\"High resolution article-specific DataTip cover image for \\\"GitHub confirms internal repository breach via poisoned VS Code extension\\\".\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/domov\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#website\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/\",\"name\":\"DATATIP\",\"description\":\"MAKES IT EASIER\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#organization\",\"name\":\"DATATIP\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/cropped-image002.jpg\",\"contentUrl\":\"https:\\\/\\\/www.datatip.eu\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/cropped-image002.jpg\",\"width\":512,\"height\":512,\"caption\":\"DATATIP\"},\"image\":{\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"http:\\\/\\\/facebook.com\\\/datatip.eu\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/#\\\/schema\\\/person\\\/42e58f2c85d280383632fe4803e70928\",\"name\":\"DataTip\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g\",\"caption\":\"DataTip\"},\"url\":\"https:\\\/\\\/www.datatip.eu\\\/sk\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec - DATATIP","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/","og_locale":"sk_SK","og_type":"article","og_title":"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec - DATATIP","og_description":"Otr\u00e1ven\u00e9 roz\u0161\u00edrenie VS Code ukazuje, pre\u010do v\u00fdvoj\u00e1rske n\u00e1stroje potrebuj\u00fa kontroly dod\u00e1vate\u013esk\u00e9ho re\u0165azca, politiku roz\u0161\u00edren\u00ed, hygienu tajomstiev a pl\u00e1novanie reakcie na incidenty.","og_url":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/","og_site_name":"DATATIP","article_publisher":"http:\/\/facebook.com\/datatip.eu","article_published_time":"2026-05-25T09:21:23+00:00","article_modified_time":"2026-08-23T18:39:03+00:00","og_image":[{"width":2400,"height":1350,"url":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","type":"image\/jpeg"}],"author":"DataTip","twitter_card":"summary_large_image","twitter_misc":{"Autor":"DataTip","Predpokladan\u00fd \u010das \u010d\u00edtania":"9 min\u00fat"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#article","isPartOf":{"@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/"},"author":{"name":"DataTip","@id":"https:\/\/www.datatip.eu\/sk\/#\/schema\/person\/42e58f2c85d280383632fe4803e70928"},"headline":"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec","datePublished":"2026-05-25T09:21:23+00:00","dateModified":"2026-08-23T18:39:03+00:00","mainEntityOfPage":{"@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/"},"wordCount":1894,"publisher":{"@id":"https:\/\/www.datatip.eu\/sk\/#organization"},"image":{"@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#primaryimage"},"thumbnailUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","keywords":["Security","VS Code","Supply Chain Attack","Developers","Nx Console"],"articleSection":["Technology","Security"],"inLanguage":"sk-SK"},{"@type":"WebPage","@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/","url":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/","name":"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec - DATATIP","isPartOf":{"@id":"https:\/\/www.datatip.eu\/sk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#primaryimage"},"image":{"@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#primaryimage"},"thumbnailUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","datePublished":"2026-05-25T09:21:23+00:00","dateModified":"2026-08-23T18:39:03+00:00","breadcrumb":{"@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#primaryimage","url":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","contentUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2026\/06\/datatip-featured-v5-159700-cybersecurity-evidence-module-2400x1350-1.jpg","width":2400,"height":1350,"caption":"High resolution article-specific DataTip cover image for \"GitHub confirms internal repository breach via poisoned VS Code extension\"."},{"@type":"BreadcrumbList","@id":"https:\/\/www.datatip.eu\/sk\/unik-v-rozsireni-vs-code-je-varovanim-pre-cely-vas-nastrojovy-retazec\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.datatip.eu\/sk\/domov\/"},{"@type":"ListItem","position":2,"name":"\u00danik v roz\u0161\u00edren\u00ed VS Code je varovan\u00edm pre cel\u00fd v\u00e1\u0161 n\u00e1strojov\u00fd re\u0165azec"}]},{"@type":"WebSite","@id":"https:\/\/www.datatip.eu\/sk\/#website","url":"https:\/\/www.datatip.eu\/sk\/","name":"DATATIP","description":"MAKES IT EASIER","publisher":{"@id":"https:\/\/www.datatip.eu\/sk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.datatip.eu\/sk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"},{"@type":"Organization","@id":"https:\/\/www.datatip.eu\/sk\/#organization","name":"DATATIP","url":"https:\/\/www.datatip.eu\/sk\/","logo":{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/www.datatip.eu\/sk\/#\/schema\/logo\/image\/","url":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2025\/01\/cropped-image002.jpg","contentUrl":"https:\/\/www.datatip.eu\/wp-content\/uploads\/2025\/01\/cropped-image002.jpg","width":512,"height":512,"caption":"DATATIP"},"image":{"@id":"https:\/\/www.datatip.eu\/sk\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/facebook.com\/datatip.eu"]},{"@type":"Person","@id":"https:\/\/www.datatip.eu\/sk\/#\/schema\/person\/42e58f2c85d280383632fe4803e70928","name":"DataTip","image":{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/secure.gravatar.com\/avatar\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/31559e6d4de9111d156a57421779652c2c55967e338ba2064406b71ba220f212?s=96&d=mm&r=g","caption":"DataTip"},"url":"https:\/\/www.datatip.eu\/sk\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/posts\/181839","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/comments?post=181839"}],"version-history":[{"count":3,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/posts\/181839\/revisions"}],"predecessor-version":[{"id":182044,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/posts\/181839\/revisions\/182044"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/media\/159899"}],"wp:attachment":[{"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/media?parent=181839"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/categories?post=181839"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.datatip.eu\/sk\/wp-json\/wp\/v2\/tags?post=181839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}