GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.